CVE-2006-1868
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows...
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
Exploit likelihood
What each source reports
NVD Score used
7.5
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
- Record
CVE-2006-1868- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
- Record
CVE-2006-1868- Updated
- 2026-11-02
EUVDEUVD-2006-1868 No score
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
- Record
EUVD-2006-1868- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-px4p-8cpc-27j4 No score
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows...
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
- Record
GHSA-px4p-8cpc-27j4- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1868 is a high vulnerability (CVSS 7.5) in Oracle Database Server, published April 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.4%, the 96th percentile. No source names a fixed version.
References
secunia.com/advisories/19712
secunia.com/advisories/19859
kb.cert.org/vuls/id/797465
oracle.com/technetwork/topics/security/cpuapr2006-090826.html
vupen.com/english/advisories/2006/1571
securityfocus.com/bid/17590
Show 10 moreShow less
securityfocus.com/archive/1/432267/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/26049
red-database-security.com/advisory/oracle_cpu_apr_2006.html
securityfocus.com/archive/1/431588/100/0/threaded
us-cert.gov/cas/techalerts/TA06-109A.html
argeniss.com/research/ARGENISS-ADV-040603.txt
vupen.com/english/advisories/2006/1397
securitytracker.com/id?1015961
nvd.nist.gov/vuln/detail/CVE-2006-1868
github.com/advisories/GHSA-px4p-8cpc-27j4