CVE-2005-2372 Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a maliciou...
HighCVSS 7.2
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle forms | = 3.0 | No fix listed |
| oracle forms | = 4.5 | No fix listed |
| oracle forms | = 5.0 | No fix listed |
| oracle forms | = 6.0 | No fix listed |
| oracle forms | = 6i | No fix listed |
| oracle forms | = 9i | No fix listed |
| oracle forms | = 10g | No fix listed |
References
- 20050719 Oracle Security Advisory: Run any OS Command via unauthorized Oracle Forms mailing-list
- www.red-database-security.com exploit vendor-advisory