PT-2005-1376 · Oracle · Oracle

Pete Finnigan · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0298

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle versions 8i through 10g

Description The issue concerns the DIRECTORY objects in the affected Oracle versions, which store the location of a specific operating system directory. This allows users with read privileges to a DIRECTORY object to access sensitive information.

Recommendations For Oracle versions 8i through 10g, restrict read access to DIRECTORY objects to prevent unauthorized users from obtaining sensitive information. Consider revoking read privileges from users who do not require them.

Correção

Identificadores relacionados

CVE-2005-0298

Produtos afetados

Oracle

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0298 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0298 · Nota de Segurança
• http://oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18947 · Nota
• http://marc.info/?l=bugtraq&m=110608912525883&w=2 · Nota
• http://petefinnigan.com/directory_traversal.pdf · Aviso do Fabricante