Every CVE Search/ Get API key

CVE-2006-1868

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows...

7.5 High

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

Exploit likelihood

14.4%Up 10.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

Record
CVE-2006-1868
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

Record
CVE-2006-1868
Updated
2026-11-02
EUVDEUVD-2006-1868 No score

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

Record
EUVD-2006-1868
Updated
2026-11-03
GitHub AdvisoriesGHSA-px4p-8cpc-27j4 No score

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows...

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

Record
GHSA-px4p-8cpc-27j4
Weakness
CWE-119
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1868 is a high vulnerability (CVSS 7.5) in Oracle Database Server, published April 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.4%, the 96th percentile. No source names a fixed version.

References

Show 10 moreShow less
MoveEnter Open