CVE-2006-3698

This Perl script exploits CVE-2006-3698 in Oracle Database 10g by leveraging a cursor injection vulnerability in KUPW$WORKER.MAIN to grant or revoke DBA privileges without requiring CREATE PROCEDURE privileges. It uses DBMS_SQL to execute arbitrary SQL commands via a crafted cursor, bypassing standard authorization checks.

This Perl script exploits CVE-2006-3698 in Oracle Database 10g by leveraging a SQL injection vulnerability in the KUPW$WORKER.MAIN function to grant or revoke DBA privileges to an unprivileged user. It creates a malicious function and triggers the vulnerability via a crafted SQL query.

This exploit leverages SQL injection in Oracle10g's KUPW$WORKER.MAIN function to grant DBA privileges to a user. It requires CREATE SESSION and CREATE PROCEDURE privileges to execute the malicious function.