CVE-2006-5334: Oracle Database Server

High severity, CVSS 7.1. EPSS: 3.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.

Affected products

• Oracle Database Server: version 9.0.1.5 only; version 9.2.0.7 only; version 10.1.0.5 only

Published 2006-10-18. Last modified 2026-06-16.