CVE-2004-1364
N/A
Published: January 19, 2005 at 05:00 AM UTC
Updated: June 16, 2026 at 10:07 PM UTC
9 products affected across 1 vendorE Business SuiteApplication ServerEnterprise Manager Grid Control
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 14%
Description
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
enterprise_8.0.5_.0.0enterprise_8.0.6_.0.0enterprise_8.0.6_.0.1enterprise_8.1.5_.0.0enterprise_8.1.5_.0.2enterprise_8.1.5_.1.0enterprise_8.1.6_.0.0enterprise_8.1.6_.1.0enterprise_8.1.7_.0.0enterprise_8.1.7_.1.0enterprise_8.1.7_.4standard_8.0.6standard_8.0.6_.3standard_8.1.5standard_8.1.6standard_8.1.7standard_8.1.7_.0.0standard_8.1.7_.1standard_8.1.7_.4
client_9.2.0.1client_9.2.0.2enterprise_8.1.7enterprise_9.0.1enterprise_9.0.1.4enterprise_9.0.1.5enterprise_9.2.0enterprise_9.2.0.1enterprise_9.2.0.2enterprise_9.2.0.3enterprise_9.2.0.4enterprise_9.2.0.5personal_8.1.7personal_9.0.1personal_9.0.1.4personal_9.0.1.5personal_9.2personal_9.2.0.1personal_9.2.0.2personal_9.2.0.3personal_9.2.0.4personal_9.2.0.5standard_8.1.7standard_9.0standard_9.0.1standard_9.0.1.2standard_9.0.1.3standard_9.0.1.4standard_9.0.1.5standard_9.0.2standard_9.2standard_9.2.0.1standard_9.2.0.2standard_9.2.0.3standard_9.2.0.4standard_9.2.0.5
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (10)
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=110382406002365&w=2Vendor Advisoryx_refsource_SUNALERT
Source: [email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1Third Party Advisoryx_refsource_CERT-VNUS Government Resource
Source: [email protected]
http://www.kb.cert.org/vuls/id/316206x_refsource_MISCPatchVendor Advisory
Source: [email protected]
http://www.ngssoftware.com/advisories/oracle23122004B.txtx_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdfMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/454861/100/0/threadedQuick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card