CVE ID:	CVE-2006-1868
Description:	Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1868 BugTraq ID: 17590 http://www.securityfocus.com/bid/17590 Bugtraq: 20060420 [Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure (Google Search) http://www.securityfocus.com/archive/1/431588/100/0/threaded Cert/CC Advisory: TA06-109A http://www.us-cert.gov/cas/techalerts/TA06-109A.html CERT/CC vulnerability note: VU#797465 http://www.kb.cert.org/vuls/id/797465 HPdes Security Advisory: HPSBMA02113 http://www.securityfocus.com/archive/1/432267/100/0/threaded HPdes Security Advisory: SSRT061148 http://www.securityfocus.com/archive/1/432267/100/0/threaded http://www.argeniss.com/research/ARGENISS-ADV-040603.txt http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html http://securitytracker.com/id?1015961 http://secunia.com/advisories/19712 http://secunia.com/advisories/19859 http://www.vupen.com/english/advisories/2006/1397 http://www.vupen.com/english/advisories/2006/1571 XForce ISS Database: oracle-dbmssnapshotutl-bo(26049) https://exchange.xforce.ibmcloud.com/vulnerabilities/26049