File Access Vulnerability in Oracle 10g Application Server
CVE-2004-1368

Currently unrated

Key Information:

Vendor
Oracle
Status
Oracle10g
Oracle8i
Oracle9i
Collaboration Suite
Vendor
CVE Published:
4 August 2004

Summary

The ISQL*Plus component of Oracle 10g Application Server is susceptible to a file access vulnerability. This issue arises when remote attackers can use an absolute pathname in the file parameter while executing the load.uix script, enabling them to run arbitrary files on the server. An attacker could exploit this vulnerability to execute malicious scripts, potentially compromising the system's integrity and confidentiality. Addressing this issue requires prompt updates and security measures to protect against unauthorized file execution.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/18656
vdb-entryx_refsource_XF
http://marc.info/?l=bugtraq&m=110382264415387&w=2
mailing-listx_refsource_BUGTRAQ
http://www.ngssoftware.com/advisories/oracle23122004E.txt
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.