CVE-2004-1364

Опубликовано: 04 авг. 2004

Источник: nvd

CVSS2: 8.5

EPSS Средний

Описание

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

Ссылки

http://marc.info/?l=bugtraq&m=110382406002365&w=2
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
http://www.0xdeadbeef.info/exploits/raptor_oraextproc.sql
http://www.kb.cert.org/vuls/id/316206
US Government Resource
http://www.ngssoftware.com/advisories/oracle23122004B.txt
Patch
Vendor Advisory
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/454861/100/0/threaded
http://www.securityfocus.com/bid/10871
Patch
http://www.us-cert.gov/cas/techalerts/TA04-245A.html
Patch
Third Party Advisory
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18658
http://marc.info/?l=bugtraq&m=110382406002365&w=2
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
http://www.0xdeadbeef.info/exploits/raptor_oraextproc.sql
http://www.kb.cert.org/vuls/id/316206
US Government Resource
http://www.ngssoftware.com/advisories/oracle23122004B.txt
Patch
Vendor Advisory
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/454861/100/0/threaded
http://www.securityfocus.com/bid/10871
Patch
http://www.us-cert.gov/cas/techalerts/TA04-245A.html
Patch
Third Party Advisory
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18658

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.15168

Средний

8.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-rx5m-vvp9-4xw5

github

больше 3 лет назад