← Vulnerability feed

Vulnerability record · CVE-2006-0272 · published 18 January 2006

CVE-2006-0272: Oracle10g vulnerability

Oracle · Oracle10g

Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS.

9.0 CVSS 2.0 High EPSS 5.8% · top 7.1%
9.0CVSS 2.0 base score
5.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
32References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS.

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html
http://secunia.com/advisories/18493 Vendor Advisory
http://secunia.com/advisories/18608 Vendor Advisory
http://securitytracker.com/id?1015499
http://www.argeniss.com/research/ARGENISS-ADV-010601.txt
http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf
http://www.kb.cert.org/vuls/id/545804 Third Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/891644 US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html
http://www.securityfocus.com/bid/16287
http://www.us-cert.gov/cas/techalerts/TA06-018A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0243 Vendor Advisory
http://www.vupen.com/english/advisories/2006/0323 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
https://exchange.xforce.ibmcloud.com/vulnerabilities/24376
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html
http://secunia.com/advisories/18493 Vendor Advisory
http://secunia.com/advisories/18608 Vendor Advisory
http://securitytracker.com/id?1015499
http://www.argeniss.com/research/ARGENISS-ADV-010601.txt
http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf
http://www.kb.cert.org/vuls/id/545804 Third Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/891644 US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html
http://www.securityfocus.com/bid/16287
http://www.us-cert.gov/cas/techalerts/TA06-018A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0243 Vendor Advisory
http://www.vupen.com/english/advisories/2006/0323 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
https://exchange.xforce.ibmcloud.com/vulnerabilities/24376

Track CVE-2006-0272 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-0262Oracle database server vulnerabilityUnspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has u…EPSS 3.9%10.0CVE-2006-0271Oracle database server vulnerabilityUnspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impa…EPSS 3.4%10.0CVE-2003-1208Oracle9i vulnerabilityMultiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to…EPSS 13%10.0CVE-2003-0095Oracle database server memory buffer overflow vulnerabilityBuffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long userna…EPSS 13%9.0CVE-2004-1371Oracle application server memory buffer overflow vulnerabilityStack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedur…EPSS 11%9.0CVE-2003-0222Oracle database server memory buffer overflow vulnerabilityStack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via…EPSS 11%9.0CVE-2003-0096Oracle database server memory buffer overflow vulnerabilityMultiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a…EPSS 16%8.5CVE-2004-0638Oracle8i memory buffer overflow vulnerabilityBuffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, …EPSS 6.6%

Source: NIST National Vulnerability Database (record CVE-2006-0272), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.