EDB-2951
functionalOracle 9i/10g - 'extproc' Local/Remote Command Execution
view exploit source exploit_dbverifiedtype remoteauthor Marco Ivaldipublished 2006-12-19catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-1364US | high8.5 | Exploit | ||
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan