Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Oracle Database Server Other Vulnerability - CVE-2006-7141 - Vulnerability Database
Oracle Database Server

Oracle Database Server Other Vulnerability - CVE-2006-7141

Medium
Reference: CVE-2006-7141
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-7141
Title: Oracle Database Server Other Vulnerability
Overview:

DISPUTED Absolute path traversal vulnerability in Oracle Database Server when utl_file_dir is set to a wildcard value or quotCREATE ANY DIRECTORY to PUBLICquot privileges exist allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such as (1) utl_file.put_line and (2) utl_file.get_line a related issue to CVE-2005-0701. NOTE: this issue is disputed by third parties who state that this is due to an insecure configuration instead of an inherent vulnerability.