← Database

CVE-2004-1364

HIGH CVSS: 8.5 Published: 2004-08-04 Modified: 2026-06-16

Description

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

Affected Platforms

Oracle Application ServerOracle Oracle8IOracle Enterprise ManagerOracle Oracle9IOracle Enterprise Manager Database ControlOracle Enterprise Manager Grid ControlOracle Oracle10GOracle E-Business SuiteOracle Collaboration Suite

Weakness Type

CWE-22

References