Vulnerability in Oracle Database Server
CVE-2005-0701
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.
EPSS: 0.181 (96.9th percentile) — read the EPSS interpretation.
Affected products
- Oracle Database_server
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, Patch, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)