6

CVE-2006-7067

Exploit
Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with invalid arguments.  NOTE: this issue was originally disputed by a third party, but the dispute was retracted.  NOTE: this issue was called an "integer overflow" in the original source, but this might be incorrect.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Database Server Version 10.2.1 Update r2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.83% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6 1.5 10
AV:L/AC:H/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048251.html
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048292.html
http://securityreason.com/securityalert/2328
http://www.securityfocus.com/archive/1/441345/100/0/threaded
http://www.securityfocus.com/archive/1/441477/100/0/threaded