CVE-2005-0701

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032273.htmlExploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=111023635928211&w=2
http://www.argeniss.com/research/ARGENISS-ADV-030501.txtExploit, Patch, Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032273.htmlExploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=111023635928211&w=2
http://www.argeniss.com/research/ARGENISS-ADV-030501.txtExploit, Patch, Vendor Advisory

Timeline

Published: Mar 7, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-07025.0SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in for CVE-2005-07035.0Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through CVE-2005-07047.5Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application CVE-2005-07055.0The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a de CVE-2005-07067.5Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by caus CVE-2005-07077.2Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated us CVE-2005-070810.0The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while i CVE-2005-07094.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary c CVE-2005-07104.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path CVE-2005-07112.1MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CVE-2005-07124.6Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly vi CVE-2005-07134.6The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to