Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0298
oracle
8i
9i
10g
directory
sensitive information
privilege escalation
nvd
cve-2005-0298
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.1%
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
Affected configurations
Node
oracledatabase_serverMatch8.0.6
ORoracledatabase_serverMatch8.0.6.3
ORoracledatabase_serverMatch8.1.7.4
ORoracledatabase_serverMatch9.0.1.4
ORoracledatabase_serverMatch9.0.1.5
ORoracledatabase_serverMatch9.0.4
ORoracledatabase_serverMatch9.2.0.4
ORoracledatabase_serverMatch9.2.0.5
ORoracledatabase_serverMatch9.2.0.6
ORoracledatabase_serverMatch10.1.0.2
ORoracledatabase_serverMatch10.1.0.3
ORoracledatabase_serverMatch10.1.0.3.1
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2005-0298