NVD

Id
68063  
Name
CVE-2005-2371  
Description
Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-07-26  
Modified Date
2017-07-10  
Seq
2005-2371  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
351942 68063 CVE-2005-2371 20050719 Oracle Security Advisory: Overwrite any file via desname in Oracle Reports  View
351943 68063 CVE-2005-2371 1014524  View
351944 68063 CVE-2005-2371 http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html  View
351945 68063 CVE-2005-2371 http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html  View
351946 68063 CVE-2005-2371 20060117 Oracle Reports - Overwrite any application server file via desname (fixed after 889 days)  View
351947 68063 CVE-2005-2371 14309  View
351948 68063 CVE-2005-2371 ADV-2006-0323  View
351949 68063 CVE-2005-2371 oracle-january2006-update(24321)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57828 JVNDB-2006-000024 Oracle Reports における複数のディレクトリトラバーサルの脆弱性 (REP06) ------------ CVE-2005-2371 13575 CVE-2005-2371 68063 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000024.html 2006-01-17 2007-04-01 View