SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2004-1364

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOMEin directory.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 8.5
Exploit Score: 6.8
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

SUNALERT-101782

BID-10871

http://marc.info/?l=bugtraq&m=110382406002365&w=2

http://www.securityfocus.com/archive/1/454861/100/0/threaded

TA04-245A

VU#316206

http://www.0xdeadbeef.info/exploits/raptor_oraextproc.sql

http://www.ngssoftware.com/advisories/oracle23122004B.txt

http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf

oracle-extproc-directory-traversal(18658)


30430



423868



247974



909



194654



282