CVE-2005-0701

Description

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.

References

http://marc.info/?l=bugtraq&m=111023635928211&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3