CVE-2006-0549

N/A Unknown
Published: February 04, 2006 Modified: April 16, 2026
View on NVD

Description

SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB05 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260. However, there are some inconsistencies that make this unclear, and there is also a possibility that this is related to DB06, which is subsumed by CVE-2006-0259.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf
Source: cve@mitre.org
Vendor Advisory
http://www.kb.cert.org/vuls/id/629316
Source: cve@mitre.org
Third Party Advisory US Government Resource
http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
Source: cve@mitre.org
Vendor Advisory
http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html
Source: cve@mitre.org
http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html
Source: cve@mitre.org
http://www.us-cert.gov/cas/techalerts/TA06-018A.html
Source: cve@mitre.org
Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
Source: cve@mitre.org
http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.kb.cert.org/vuls/id/629316
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory US Government Resource
http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA06-018A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
Source: af854a3a-2127-422b-91ae-364da2661108

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.1%
78th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

oracle