CVE-2005-2378

Oracle Reports - Path Traversal via CUSTOMIZE or desformat Parameter

Title source: llm

Description

Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU.

References (11)

Core 11

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1014527

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/24321

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/422256/30/7430/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1014525

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=112181242916757&w=2

Exploit, Vendor Advisory x_refsource_misc

http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18493

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/0323

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=112181054226520&w=2

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18608

Exploit, Vendor Advisory x_refsource_misc

http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html

Scores

EPSS 0.0911

EPSS Percentile 94.7%

Details

CWE

CWE-22

Status published

Products (1)

oracle/reports

Published Jul 26, 2005

Tracked Since Feb 18, 2026