Description

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.

Remediation

References

CVE-2005-0701

Related Vulnerabilities

WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2)

WordPress Plugin WP-DownloadManager Cross-Site Request Forgery (1.60)

Dot CMS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2022-45782)

WordPress Plugin Search Types Custom Fields Widget Unspecified Vulnerability (1.3)

WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (12.0.1)

Severity

Medium

Classification

CVE-2005-0701

Tags

Missing Update Known Vulnerabilities