CVE-2004-1364

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

Affected products

Oracle

Oracle Application Server

All versions

Oracle Collaboration Suite

= release_1

Oracle E-business Suite

= 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9

Oracle Enterprise Manager

= 9, 9.0.1

Oracle Enterprise Manager Database Control

= 10.1.2

Oracle Enterprise Manager Grid Control

= 10.1.0.2

CVSS 2.0

8.5 HIGH

EPSS

13.8% (96th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2005-01-19