DB: Oracle SYS.KUPV Unsafe Command

This signature detects attempts to exploit a known vulnerability against Oracle Database SYS.KUPV module. A successful attack can lead to arbitrary code execution.

Extended Description

Oracle 10g is prone to multiple SQL-injection vulnerabilities. These issues affect various functions of the 'SYS.KUPV$FT' package. Exploiting these vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. Successful exploitation may allow the attacker to compromise the application, retrieve sensitive information, or modify data; other consequences are possible as well. Oracle 10g Release 1 and prior versions are considered vulnerable to these issues. These issues are part of the vulnerabilities addressed by Oracle in Oracle Critical Patch Update - January 2006. Please see BID 16287 (Oracle January Security Update Multiple Vulnerabilities) for more information.

Affected Products

Oracle oracle10g_standard_edition

References

BugTraq: 16294 16287

CVE: CVE-2006-0586

URL: http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html

Short Name

DB:ORACLE:SYS:KUPVFT-UNSAFE

Severity

Major

Recommended

False

Recommended Action

None

DB: Oracle SYS.KUPV Unsafe Command

Extended Description

Affected Products

References

Found a potential security threat?