NuytsTech Security

CVE-2006-0275

by ·

Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.

Date published : 2006-01-18

http://www.securityfocus.com/bid/16287

http://www.securityfocus.com/archive/1/422261/30/7430/threaded

Tags: