CVE-2005-2371

2005-07-2604:00:00

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.878

Percentile

98.7%

JSON

Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) “…”, (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.

Affected configurations

Nvd

Node

oraclereportsMatch6.0

oraclereportsMatch6i

oraclereportsMatch9i

oraclereportsMatch10g

VendorProductVersionCPE
oraclereports6.0cpe:2.3:a:oracle:reports:6.0:*:*:*:*:*:*:*
oraclereports6icpe:2.3:a:oracle:reports:6i:*:*:*:*:*:*:*
oraclereports9icpe:2.3:a:oracle:reports:9i:*:*:*:*:*:*:*
oraclereports10gcpe:2.3:a:oracle:reports:10g:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	reports	6.0	cpe:2.3:a:oracle:reports:6.0:::::::*
oracle	reports	6i	cpe:2.3:a:oracle:reports:6i:::::::*
oracle	reports	9i	cpe:2.3:a:oracle:reports:9i:::::::*
oracle	reports	10g	cpe:2.3:a:oracle:reports:10g:::::::*