CVE-2005-2378 Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE...
MediumCVSS 5.0
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle reports | All versions | No fix listed |
References
- 20050719 Oracle Security Advisory: Read parts of any file via desformat in Oracle Reports mailing-list
- 20050719 Oracle Security Advisory: Read parts of any XML-file via customize parameter in Oracle Reports mailing-list
- 18493 third-party-advisory vendor-advisory
- 18608 third-party-advisory vendor-advisory
- 1014525 vdb-entry
- 1014527 vdb-entry
- www.red-database-security.com exploit vendor-advisory
- www.red-database-security.com exploit vendor-advisory
- 20060117 Oracle Reports - Read parts of files via desname (fixed after 874 days) mailing-list
- ADV-2006-0323 vdb-entry vendor-advisory
- oracle-january2006-update(24321) vdb-entry