CVE-2005-0701 Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." (modified dot dot backslash) sequences to UTL_FILE functions...
MediumCVSS 5.0
EPSS 18.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle database server | All versions | No fix listed |
References
- 20050307 - Argeniss - Oracle Database Server Directory transversal exploit mailing-list patch vendor-advisory
- 20050307 - Argeniss - Oracle Database Server Directory transversal mailing-list
- www.argeniss.com exploit patch vendor-advisory