![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
Oracle Application Server Reports desname Arbitrary File Overwriting
2015年7月21日
危険度: : 中
CVE識別番号: CVE-2005-2371
概要
Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1000147
Trend Micro Deep Security DPI Rule Name: 1000147 - Oracle Application Server Reports desname Arbitrary File Overwriting
影響を受けるソフトウェア
- Oracle Oracle Reports 10g
- Oracle Oracle Reports 6.0
- Oracle Oracle Reports 6i
- Oracle Oracle Reports 9i