Lucene search

[email protected]CVE-2004-1368

HistoryAug 04, 2004 - 4:00 a.m.

CVE-2004-1368

2004-08-0404:00:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2004-1368

isql*plus

oracle

remote execution

security vulnerability

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.04 Low

EPSS

Percentile

92.0%

JSON

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

CPENameOperatorVersion
oracle:oracle10goracle oracle10geqstandard_9.0.4_.0
oracle:oracle8ioracle oracle8ieqstandard_8.1.7_.4
oracle:oracle9ioracle oracle9ieqstandard_9.0.2
oracle:oracle9ioracle oracle9ieqstandard_9.0.1.4
oracle:collaboration_suiteoracle collaboration suiteeqrelease_1
oracle:application_serveroracle application servereq9.0.2.1
oracle:oracle8ioracle oracle8ieqenterprise_8.1.6_.0.0
oracle:oracle9ioracle oracle9ieqpersonal_8.1.7
oracle:application_serveroracle application servereq*
oracle:oracle9ioracle oracle9ieqclient_9.2.0.2

CPE	Name	Operator	Version
oracle:oracle10g	oracle oracle10g	eq	standard_9.0.4_.0
oracle:oracle8i	oracle oracle8i	eq	standard_8.1.7_.4
oracle:oracle9i	oracle oracle9i	eq	standard_9.0.2
oracle:oracle9i	oracle oracle9i	eq	standard_9.0.1.4
oracle:collaboration_suite	oracle collaboration suite	eq	release_1
oracle:application_server	oracle application server	eq	9.0.2.1
oracle:oracle8i	oracle oracle8i	eq	enterprise_8.1.6_.0.0
oracle:oracle9i	oracle oracle9i	eq	personal_8.1.7
oracle:application_server	oracle application server	eq	*
oracle:oracle9i	oracle oracle9i	eq	client_9.2.0.2

Rows per page:

1-10 of 871

References

marc.info/?l=bugtraq&m=110382264415387&w=2

sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1

www.kb.cert.org/vuls/id/435974

www.ngssoftware.com/advisories/oracle23122004E.txt

www.securityfocus.com/bid/10871

www.us-cert.gov/cas/techalerts/TA04-245A.html

exchange.xforce.ibmcloud.com/vulnerabilities/18656

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.04 Low

EPSS

Percentile

92.0%

JSON

Related for CVE-2004-1368

cvelist1 nessus5