CVE

Id
9796  
CVE No.
CVE-2004-1368  
Status
Candidate  
Description
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.  
Phase
Assigned (20050107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66724 9796 CVE-2004-1368 BUGTRAQ:20041223 Oracle ISQLPlus file access vulnerability (#NISR2122004E)  View
66725 9796 CVE-2004-1368 URL:http://marc.info/?l=bugtraq&m=110382264415387&w=2  View
66726 9796 CVE-2004-1368 MISC:http://www.ngssoftware.com/advisories/oracle23122004E.txt  View
66727 9796 CVE-2004-1368 SUNALERT:101782  View
66728 9796 CVE-2004-1368 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1  View
66729 9796 CVE-2004-1368 CERT:TA04-245A  View
66730 9796 CVE-2004-1368 URL:http://www.us-cert.gov/cas/techalerts/TA04-245A.html  View
66731 9796 CVE-2004-1368 CERT-VN:VU#435974  View
66732 9796 CVE-2004-1368 URL:http://www.kb.cert.org/vuls/id/435974  View
66733 9796 CVE-2004-1368 BID:10871  View
66734 9796 CVE-2004-1368 URL:http://www.securityfocus.com/bid/10871  View
66735 9796 CVE-2004-1368 XF:oracle-isqlplus-file-access(18656)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63018 JVNDB-2004-000360 Oracle 製品の TNS Listener におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2004-1369 9796 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000360.html  View