Description

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.

Remediation

References

CVE-2005-0701

Related Vulnerabilities

Oracle Database Server CVE-2010-0902 Vulnerability (CVE-2010-0902)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-4721)

WordPress Plugin Duplicate Page Cross-Site Scripting (4.4.2)

WordPress Plugin WishList Member X SQL Injection (3.25.1)

Joomla! Core Cross-Site Scripting (1.0.0 - 3.9.2)

Severity

Medium

Classification

CVE-2005-0701

Tags

Missing Update Known Vulnerabilities