CVE

Id
23245  
CVE No.
CVE-2006-7141  
Status
Candidate  
Description
** DISPUTED ** Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such as (1) utl_file.put_line and (2) utl_file.get_line, a related issue to CVE-2005-0701. NOTE: this issue is disputed by third parties who state that this is due to an insecure configuration instead of an inherent vulnerability.  
Phase
Assigned (20070307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
223802 23245 CVE-2006-7141 BUGTRAQ:20061219 Oracle <= 9i / 10g File System Access via utl_file Exploit  View
223803 23245 CVE-2006-7141 URL:http://www.securityfocus.com/archive/1/archive/1/454862/100/0/threaded  View
223804 23245 CVE-2006-7141 BUGTRAQ:20061220 Re: Oracle <= 9i / 10g File System Access via utl_file Exploit  View
223805 23245 CVE-2006-7141 URL:http://www.securityfocus.com/archive/1/archive/1/454964/100/0/threaded  View
223806 23245 CVE-2006-7141 BUGTRAQ:20061221 Re: Oracle <= 9i / 10g File System Access via utl_file Exploit  View
223807 23245 CVE-2006-7141 URL:http://www.securityfocus.com/archive/1/archive/1/455047/100/0/threaded  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52599 JVNDB-2007-001291 Call Center Software におけるクロスサイトスクリプティングの脆弱性 Call Center Software には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-7143 23245 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001291.html  View