Oracle Oracle Reports6i 6.0.8

CPE Details

Oracle Oracle Reports6i 6.0.8
oracle
reports
6.0.8
2007-08-23
19h16 +00:00
2008-04-01
14h41 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:reports:6.0.8:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

reports

Version

6.0.8

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2005-2378 2005-07-26 02h00 +00:00 Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU.
5
CVE-2002-0947 2003-04-02 03h00 +00:00 Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
7.5
CVE-2002-1089 2002-08-31 02h00 +00:00 rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.
5