CVE

Id
92356  
CVE No.
CVE-2016-5537  
Status
Candidate  
Description
Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this issue is a directory traversal vulnerability which allows local users with certain permissions to write to arbitrary files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project.  
Phase
Assigned (20160616)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
790359 92356 CVE-2016-5537 BUGTRAQ:20161021 Oracle Netbeans IDE v8.1 Import Directory Traversal  View
790360 92356 CVE-2016-5537 URL:http://www.securityfocus.com/archive/1/archive/1/539615/100/0/threaded  View
790361 92356 CVE-2016-5537 EXPLOIT-DB:40588  View
790362 92356 CVE-2016-5537 URL:https://www.exploit-db.com/exploits/40588/  View
790363 92356 CVE-2016-5537 MISC:http://hyp3rlinx.altervista.org/advisories/ORACLE-NETBEANS-IDE-DIRECTORY-TRAVERSAL.txt  View
790364 92356 CVE-2016-5537 MISC:http://packetstormsecurity.com/files/139259/Oracle-Netbeans-IDE-8.1-Directory-Traversal.html  View
790365 92356 CVE-2016-5537 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
790366 92356 CVE-2016-5537 BID:93686  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2707 JVNDB-2016-003480 Siemens SICAM PAS における重要な設定情報を取得される脆弱性 Siemens SICAM PAS には、重要な設定情報を取得される脆弱性が存在します。 CVE-2016-5849 92356 1.9 2.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003480.html  View