Oracle Application Server Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2004-1364 - Vulnerability Database

Oracle Application Server Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2004-1364

High
Reference: CVE-2004-1364
Title: Oracle Application Server Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the ORACLE_HOMEbin directory.