Vulnerability Note VU#932124
Oracle DBMS_EXPORT_EXTENSION package vulnerable to SQL injection
A vulnerability in Oracle PL/SQL Export Extensions may allow an attacker to modify privileged database information.
Oracle Extensions, ODCIIndex Interface, and ODCIIndexGetMetadata
Oracle extensions are used to create customized Oracle database constructs. An indextype is an Oracle extension that allows users to create specialized indexes on an Oracle database. To create a new indextype, the ODCIIndex Interface must be implemented, meaning that certain methods specified in that interface must be defined. The ODCIIndexGetMetadata(...) routine is one such method in the ODCIIndex Interface. When the ODCIIndex Interface is implemented for a new indextype, the ODCIIndexGetMetadata(...)routine is used to specify how metadata for that indextype should be handled.
A remote attacker with some authentication credentials may be able to execute arbitrary SQL statements with elevated privileges. This may allow the attacker to access and modify sensitive information within an Oracle database.
Apply Oracle CPU
Oracle has released the Oracle Critical Patch Update (CPU) for July 2006. It is unclear from the Oracle documentation whether this issue is addressed by this CPU. Public reports indicate that this issue has been addressed by this CPU, but this has not been confirmed.
Until a patch for this issue can be applied, the following actions may reduce the chances of exploitation:
Only known and trusted users should be allowed access to Oracle. Additionally, user accounts should only be granted the fewest privileges needed to perform necessary tasks.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Oracle Corporation||Affected||02 May 2006||19 Jul 2006|
CVSS Metrics (Learn More)
This vulnerability was reported by David Litchfield of NGS Software.
This document was written by Jeff Gennari and Stephen Rhoton.
- CVE IDs: CVE-2006-3702
- Date Public: 26 Apr 2006
- Date First Published: 03 May 2006
- Date Last Updated: 25 Jul 2006
- Severity Metric: 18.56
- Document Revision: 99
If you have feedback, comments, or additional information about this vulnerability, please send us email.