CVE-2005-2371
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 22%
probabilidade de exploração
22%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.
Produtos afetados
n/a · n/aReferências
http://marc.info/?l=bugtraq&m=112180096507467&w=2http://secunia.com/advisories/18493http://secunia.com/advisories/18608http://securitytracker.com/id?1014524https://exchange.xforce.ibmcloud.com/vulnerabilities/24321http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.htmlhttp://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.htmlhttp://www.securityfocus.com/archive/1/422257/30/7430/threadedhttp://www.securityfocus.com/bid/14309http://www.vupen.com/english/advisories/2006/0323