NVD

Id
65684  
Name
CVE-2006-7141  
Description
** DISPUTED ** Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such as (1) utl_file.put_line and (2) utl_file.get_line, a related issue to CVE-2005-0701. NOTE: this issue is disputed by third parties who state that this is due to an insecure configuration instead of an inherent vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-03-07  
Modified Date
2008-09-05  
Seq
2006-7141  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342115 65684 CVE-2006-7141 http://www.0xdeadbeef.info/exploits/raptor_orafile.sql  View
342116 65684 CVE-2006-7141 20061219 Oracle <= 9i / 10g File System Access via utl_file Exploit  View
342117 65684 CVE-2006-7141 20061220 Re: Oracle <= 9i / 10g File System Access via utl_file Exploit  View
342118 65684 CVE-2006-7141 20061221 Re: Oracle <= 9i / 10g File System Access via utl_file Exploit  View

Related JVN