CVE-2006-1871

MEDIUM 6.5CVE-2006-1871 · Published 20/04/2006 · updated 16/06/2026

In short

CVE-2006-1871 is a MEDIUM (CVSS 6.5) vulnerability affecting database server (oracle).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
database server oracle	`= 10.1.0.5= 9.2.0.7`	No fix yet

Description

SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package, aka Vuln# DB06.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-April/045280.html
secunia.com/advisories/19712 · Vendor Advisory
secunia.com/advisories/19859
securitytracker.com/id · Patch
oracle.com/technetwork/topics/security/cpuapr2006-090826.html
red-database-security.com/advisory/oracle_sql_injection_dbms_logmnr_session.html · Vendor Advisory
securityfocus.com/archive/1/431345/30/5490/threaded
securityfocus.com/archive/1/432267/100/0/threaded
securityfocus.com/bid/17590 · Exploit
vupen.com/english/advisories/2006/1397
vupen.com/english/advisories/2006/1571
exchange.xforce.ibmcloud.com/vulnerabilities/26047

More vulnerabilities in database server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free