| ID |
CVE-2006-0289
|
| Summary |
Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005-2378 and REP06 is the same as CVE-2005-2371, both of which involve directory traversal. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 10.0 (as of 19-10-2018 - 15:43) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| refmap
via4
|
| bid | 16287 | | bugtraq | - 20060117 Oracle Reports - Overwrite any application server file via desname (fixed after 889 days)
- 20060117 Oracle Reports - Read parts of files via desname (fixed after 874 days)
| | cert-vn | VU#545804 | | confirm | http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html | | misc | | | sectrack | 1015499 | | secunia | | | vupen | - ADV-2006-0243
- ADV-2006-0323
| | xf | oracle-january2006-update(24321) |
|
| saint
via4
|
| bid | 16287 | | description | Oracle XML Component DBMS_XMLSCHEMA.GENERATESCHEMA buffer overflow | | id | database_oracle_version | | osvdb | 22567 | | title | oracle_xml_generateschema | | type | remote |
|
| Last major update |
19-10-2018 - 15:43 |
| Published |
18-01-2006 - 11:03 |
| Last modified |
19-10-2018 - 15:43 |
