CVE-2006-0289

Severity

99%

Complexity

99%

Confidentiality

165%

Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005-2378 and REP06 is the same as CVE-2005-2371, both of which involve directory traversal.

Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005-2378 and REP06 is the same as CVE-2005-2371, both of which involve directory traversal.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 19 years ago

2006-01-18 11:03:00

Last updated 6 years ago

2018-10-19 15:43:00

Affected Software

Oracle E-Business Suite 11i 11.5.10

11.5.10

References

18493

Vendor Advisory

18608

Vendor Advisory

1015499

VU#545804

US Government Resource

http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html

http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html

http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html

20060117 Oracle Reports - Read parts of files via desname (fixed after 874 days)

20060117 Oracle Reports - Overwrite any application server file via desname (fixed after 889 days)

16287

ADV-2006-0243

Vendor Advisory

ADV-2006-0323

Vendor Advisory

oracle-january2006-update(24321)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.