Description

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.

Remediation

References

CVE-2005-0701

Related Vulnerabilities

WordPress Plugin Profile Builder Pro Security Bypass (3.1.0)

Oracle HTTP Server CVE-2020-2545 Vulnerability (CVE-2020-2545)

Oracle Application Server Other Vulnerability (CVE-2006-5365)

Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)

PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4662)

Severity

Medium

Classification

CVE-2005-0701

Tags

Missing Update Known Vulnerabilities