CVE-2004-1368

Currently unrated

Key Information:

Vendor
Oracle
Status
Oracle10g
Oracle8i
Oracle9i
Collaboration Suite
Vendor
CVE Published:
4 August 2004

Summary

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/18656
vdb-entryx_refsource_XF
http://marc.info/?l=bugtraq&m=110382264415387&w=2
mailing-listx_refsource_BUGTRAQ
http://www.ngssoftware.com/advisories/oracle23122004E.txt
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.