CVE-2006-0272

Published: Jan 18, 2006Modified: Apr 16, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS.

Affected (4)

Products: Oracle: Oracle10g, Oracle9i

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Oracle10g	Version enterprise_10.1.0.4
Oracle Oracle10g	Version personal_10.1.0.4
Oracle Oracle10g	Version standard_10.1.0.4
Oracle Oracle9i	Version standard_9.2.0.7

References (32)

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html

Source: cve@mitre.org

http://secunia.com/advisories/18493

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18608

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015499

Source: cve@mitre.org

http://www.argeniss.com/research/ARGENISS-ADV-010601.txt

Source: cve@mitre.org

http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/545804

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/891644

Source: cve@mitre.org

US Government Resource

http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html

Source: cve@mitre.org

http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/16287

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-018A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/0243

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0323

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24321

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24376

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18493

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18608

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015499

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.argeniss.com/research/ARGENISS-ADV-010601.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/545804

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/891644

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16287

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-018A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/0243

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0323

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24321

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24376

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.