PT-2005-1901 · Oracle · Oracle Reports Server

Paolo Paolo · Publicado 2005-03-26 · Atualizado 2016-10-18 · CVE-2005-0873

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Reports Server version 9.0.4.3.3

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the desname or repprod parameters in the test.jsp file.

Recommendations For Oracle Reports Server version 9.0.4.3.3, as a temporary workaround, consider restricting access to the test.jsp file until a patch is available. Avoid using the desname and repprod parameters in the affected file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-0873

Produtos afetados

Oracle Reports Server

Referências · 10

• 🔥 https://exploit-db.com/exploits/25269 · Exploit
• 🔥 http://securityfocus.com/bid/12892 · Exploit
• http://secunia.com/advisories/17250 · Nota
• http://marc.info/?l=bugtraq&m=111168323804203&w=2 · Nota
• http://securityfocus.com/bid/15134 · Nota
• http://kb.cert.org/vuls/id/210524 · Nota
• http://us-cert.gov/cas/techalerts/TA05-292A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0873 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpuoct2005-090497.html · Nota
• http://oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html · Nota