EDB-32475
functionalOracle Database Server 11.1 - 'CREATE ANY Directory' Privilege Escalation
view exploit source exploit_dbverifiedtype remoteauthor Paul M. Wrightpublished 2008-10-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-6065US | medium5.1 | Exploit | ||
Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remo… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan