ID de Prueba:	1.3.6.1.4.1.25623.1.0.802520
Categoría:	Databases
Título:	Oracle Database Server Multiple Vulnerabilities - Oct 06
Resumen:	This host is running Oracle database and is prone to multiple; vulnerabilities.
Descripción:	Summary: This host is running Oracle database and is prone to multiple vulnerabilities. Vulnerability Insight: Please see the references for more information on the vulnerabilities. Vulnerability Impact: An unspecified impact and attack vectors. Affected Software/OS: Oracle Database server versions 8.1.7.4, 9.0.1.5, 9.2.0.6, 9.2.0.7, 10.1.0.3, 10.1.0.4, 10.1.0.5 and 10.2.0.2 Solution: Apply the patch from the referenced advisory. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 20588 Common Vulnerability Exposure (CVE) ID: CVE-2006-5332 http://www.securityfocus.com/bid/20588 Bugtraq: 20061018 Analysis of the Oracle October 2006 Critical Patch Update (Google Search) http://www.securityfocus.com/archive/1/449110/100/0/threaded Bugtraq: 20061023 SQL Injection in package XDB.DBMS_XDBZ0 (Google Search) http://www.securityfocus.com/archive/1/449510/100/0/threaded Cert/CC Advisory: TA06-291A http://www.us-cert.gov/cas/techalerts/TA06-291A.html CERT/CC vulnerability note: VU#717140 http://www.kb.cert.org/vuls/id/717140 HPdes Security Advisory: HPSBMA02133 http://www.securityfocus.com/archive/1/449711/100/0/threaded HPdes Security Advisory: SSRT061201 http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_xdbz0.html http://securitytracker.com/id?1017077 http://secunia.com/advisories/22396 http://www.vupen.com/english/advisories/2006/4065 Common Vulnerability Exposure (CVE) ID: CVE-2006-5333 Common Vulnerability Exposure (CVE) ID: CVE-2006-5334 Common Vulnerability Exposure (CVE) ID: CVE-2006-5335 Bugtraq: 20061023 SQL Injection in package SYS.DBMS_CDC_IMPDP (Google Search) http://www.securityfocus.com/archive/1/449511/100/100/threaded CERT/CC vulnerability note: VU#736324 http://www.kb.cert.org/vuls/id/736324 Common Vulnerability Exposure (CVE) ID: CVE-2006-5336 CERT/CC vulnerability note: VU#446100 http://www.kb.cert.org/vuls/id/446100 CERT/CC vulnerability note: VU#716964 http://www.kb.cert.org/vuls/id/716964 Common Vulnerability Exposure (CVE) ID: CVE-2006-5339 Common Vulnerability Exposure (CVE) ID: CVE-2006-5340 Bugtraq: 20060726 Bypassing Oracle dbms_assert (Google Search) http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html Bugtraq: 20060726 Re: Bypassing Oracle dbms_assert (Google Search) http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html Bugtraq: 20061023 SQL Injection in Oracle package MDSYS.SDO_LRS (Google Search) http://www.securityfocus.com/archive/1/449512/100/0/threaded CERT/CC vulnerability note: VU#869292 http://www.kb.cert.org/vuls/id/869292 http://www.red-database-security.com/wp/bypass_dbms_assert.pdf Common Vulnerability Exposure (CVE) ID: CVE-2006-5341 CERT/CC vulnerability note: VU#318764 http://www.kb.cert.org/vuls/id/318764 Common Vulnerability Exposure (CVE) ID: CVE-2006-5342 Common Vulnerability Exposure (CVE) ID: CVE-2006-5343 Common Vulnerability Exposure (CVE) ID: CVE-2006-5344 Common Vulnerability Exposure (CVE) ID: CVE-2006-5345
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.