CVE-2005-2371

Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive…

published July 26, 2005

CVSS

—

EPSS

22%

Percentile

97.7

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.22288 · 97.7th percentile
Published: 2005-07-26T04:00Z

EPSS history

Timeline

26 JUL 04:00Z
Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive…
cvelistv5