DB: Oracle DBMS_EXPORT_EXTENSION Package Privilege Escalation

This signature detects attempts to exploit a known vulnerability against Oracle Database Server. A successful attack can lead to privilege escalation.

Extended Description

Oracle has released a Critical Patch Update advisory for April 2006 to address multiple vulnerabilities in multiple Oracle products. This Critical Patch Update addresses the vulnerabilities for supported releases. Earlier unsupported releases are likely to be affected by the issues as well. The issues identified by the vendor affect all security properties of the Oracle products and present local and remote threats. Various levels of authorization are needed to exploit some of the issues, but other issues do not require any authorization. The most severe of these vulnerabilities could possibly expose affected computers to complete compromise. This record will be updated and split into individual BIDs for each issue as further information is disclosed.

Affected Products

Oracle oracle10g_standard_edition

References

BugTraq: 17590

CVE: CVE-2006-2081

URL: http://www.frsirt.com/english/advisories/2006/1397 http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html

Short Name

DB:ORACLE:DBMS:EXPORT-PRIV

Severity

Major

Recommended

False

Recommended Action

None

DB: Oracle DBMS_EXPORT_EXTENSION Package Privilege Escalation

Extended Description

Affected Products

References

Found a potential security threat?