CVE-2006-1868

HIGH 7.5CVE-2006-1868 · Published 20/04/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
database server oracle	`= 10.1.0.4`	No fix yet

Description

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

References

secunia.com/advisories/19712 · Vendor Advisory
secunia.com/advisories/19859 · Vendor Advisory
securitytracker.com/id · Patch
argeniss.com/research/ARGENISS-ADV-040603.txt · Vendor Advisory
kb.cert.org/vuls/id/797465 · Patch
oracle.com/technetwork/topics/security/cpuapr2006-090826.html
red-database-security.com/advisory/oracle_cpu_apr_2006.html
securityfocus.com/archive/1/431588/100/0/threaded
securityfocus.com/archive/1/432267/100/0/threaded
securityfocus.com/bid/17590 · Exploit
us-cert.gov/cas/techalerts/TA06-109A.html · US Government Resource
vupen.com/english/advisories/2006/1397 · Vendor Advisory
vupen.com/english/advisories/2006/1571 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/26049

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free