CVE-2006-1870

CriticalCVSS 9.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln# DB05. NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented on whether DB05 is the same issue as CVE-2006-2081.

Metrics

CVSS 2.0 9.0/10AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/19712Vendor Advisory
http://secunia.com/advisories/19859Vendor Advisory
http://securitytracker.com/id?1015961Patch
http://www.kb.cert.org/vuls/id/452681Third Party Advisory, US Government Resource
http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html
http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.htmlVendor Advisory
http://www.securityfocus.com/archive/1/432267/100/0/threaded
http://www.securityfocus.com/bid/17590Exploit
http://www.vupen.com/english/advisories/2006/1397Vendor Advisory
http://www.vupen.com/english/advisories/2006/1571Vendor Advisory
http://secunia.com/advisories/19712Vendor Advisory
http://secunia.com/advisories/19859Vendor Advisory
http://securitytracker.com/id?1015961Patch
http://www.kb.cert.org/vuls/id/452681Third Party Advisory, US Government Resource
http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html
http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.htmlVendor Advisory
http://www.securityfocus.com/archive/1/432267/100/0/threaded
http://www.securityfocus.com/bid/17590Exploit
http://www.vupen.com/english/advisories/2006/1397Vendor Advisory
http://www.vupen.com/english/advisories/2006/1571Vendor Advisory

Timeline

Published: Apr 20, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-18716.5SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the CVE-2006-18727.5Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Oracle Enterprise Manag CVE-2006-18739.0Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spat CVE-2006-18747.5Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle Spatia CVE-2006-187510.0Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spati CVE-2006-18769.0Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial compone CVE-2006-18777.2Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatia CVE-2006-18782.6Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML vi CVE-2006-187910.0Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 hav CVE-2006-188010.0Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as ident CVE-2006-188110.0Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact CVE-2006-188210.0Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identifi