CVE

Id
16379  
CVE No.
CVE-2006-0275  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
130614 16379 CVE-2006-0275 BUGTRAQ:20060117 Oracle Reports - Read parts of files via customize(fixed after 875 days)  View
130615 16379 CVE-2006-0275 URL:http://www.securityfocus.com/archive/1/archive/1/422261/30/7430/threaded  View
130616 16379 CVE-2006-0275 MISC:http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html  View
130617 16379 CVE-2006-0275 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html  View
130618 16379 CVE-2006-0275 CERT-VN:VU#545804  View
130619 16379 CVE-2006-0275 URL:http://www.kb.cert.org/vuls/id/545804  View
130620 16379 CVE-2006-0275 BID:16287  View
130621 16379 CVE-2006-0275 URL:http://www.securityfocus.com/bid/16287  View
130622 16379 CVE-2006-0275 VUPEN:ADV-2006-0243  View
130623 16379 CVE-2006-0275 URL:http://www.vupen.com/english/advisories/2006/0243  View
130624 16379 CVE-2006-0275 VUPEN:ADV-2006-0323  View
130625 16379 CVE-2006-0275 URL:http://www.vupen.com/english/advisories/2006/0323  View
130626 16379 CVE-2006-0275 SECTRACK:1015499  View
130627 16379 CVE-2006-0275 URL:http://securitytracker.com/id?1015499  View
130628 16379 CVE-2006-0275 SECUNIA:18493  View
130629 16379 CVE-2006-0275 URL:http://secunia.com/advisories/18493  View
130630 16379 CVE-2006-0275 SECUNIA:18608  View
130631 16379 CVE-2006-0275 URL:http://secunia.com/advisories/18608  View
130632 16379 CVE-2006-0275 XF:oracle-january2006-update(24321)  View

Related JVN