CVE-2006-5342: Oracle Database Server

High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_tune, aka Vuln# DB18. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB18 might be related to SQL injection in the EXTENT_OF function.

Affected products

• Oracle Database Server: version 9.0.1.5 only; version 9.2.0.6 only; version 10.1.0.3 only

Published 2006-10-18. Last modified 2026-06-16.