Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:ORACLE:DBMS:EXPORT-EXTENSION |
|---|---|
Severity |
Major |
Recommended |
No |
Category |
DB |
Keywords |
Oracle 10g DBMS_EXPORT_EXTENSION Privilege Escalation |
Release Date |
2012/11/12 |
Update Number |
2202 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: Oracle 10g DBMS_EXPORT_EXTENSION Privilege Escalation
This signature detects attempts to exploit a known flaw in Oracle. Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADATA function in the DBMS_EXPORT_EXTENSION package. This can result in privilege escalation.
Extended Description
Oracle 10g is prone to an SQL-injection vulnerability. An attacker could exploit this to gain DBA privileges. This vulnerability was initially thought to have been fixed as part of the Oracle April 2006 Security Update (BID 17590), but this issue reportedly wasn't patched. Further information indicates that this issue also affects the 'GET_DOMAIN_INDEX_TABLES' and "GET_V2_DOMAIN_INDEX_TABLES' functions.
Affected Products
- Oracle oracle10g_application_server 10.1.0 .0.2
- Oracle oracle10g_application_server 10.1.0 .0.3
- Oracle oracle10g_application_server 10.1.0 .0.3.1
- Oracle oracle10g_application_server 10.1.0 .0.4
- Oracle oracle10g_application_server 10.1.2
- Oracle oracle10g_application_server 10.1.2 .0.1
- Oracle oracle10g_application_server 10.1.2 .0.2
- Oracle oracle10g_application_server 10.1.2 .1.0
- Oracle oracle10g_application_server 10.1.3 .0.0
- Oracle oracle10g_application_server 9.0.4 .0
- Oracle oracle10g_application_server 9.0.4 .1
- Oracle oracle10g_application_server 9.0.4 .2
- Oracle oracle10g_enterprise_edition 10.1.0 .0.2
- Oracle oracle10g_enterprise_edition 10.1.0 .0.3
- Oracle oracle10g_enterprise_edition 10.1.0 .0.3.1
- Oracle oracle10g_enterprise_edition 10.1.0 .0.4
- Oracle oracle10g_enterprise_edition 10.2.0 .1
- Oracle oracle10g_enterprise_edition 10.2.0 .2
- Oracle oracle10g_enterprise_edition 10.2.0 .3
- Oracle oracle10g_enterprise_edition 9.0.4 .0
- Oracle oracle10g_personal_edition 10.1.0 .0.2
- Oracle oracle10g_personal_edition 10.1.0 .0.3
- Oracle oracle10g_personal_edition 10.1.0 .0.3.1
- Oracle oracle10g_personal_edition 10.1.0 .0.4
- Oracle oracle10g_personal_edition 10.2.0 .1
- Oracle oracle10g_personal_edition 10.2.0 .2
- Oracle oracle10g_personal_edition 10.2.0 .3
- Oracle oracle10g_personal_edition 9.0.4 .0
- Oracle oracle10g_standard_edition 10.1.0 .0.2
- Oracle oracle10g_standard_edition 10.1.0 .0.3
- Oracle oracle10g_standard_edition 10.1.0 .0.3.1
- Oracle oracle10g_standard_edition 10.1.0 .0.4
- Oracle oracle10g_standard_edition 10.1.0 .0.5
- Oracle oracle10g_standard_edition 10.1.0 .4.2
- Oracle oracle10g_standard_edition 10.2.0.1
- Oracle oracle10g_standard_edition 10.2.0 .2
- Oracle oracle10g_standard_edition 10.2.0 .3
- Oracle oracle10g_standard_edition 9.0.4 .0
References
- BugTraq: 17699
- CVE: CVE-2006-3702
- CVE: CVE-2006-2081