OSVDB ID: 32879

Title: Oracle Enterprise Manager /em/dynamicImage/emSDK/chart/EmChartBean beanId Parameter Traversal Arbitrary File Access

Info

Disclosure

Jan 17, 2007

Discovery

Aug 22, 2006

Dates

Exploit

Unknown

Solution

Jan 30, 2007

Description

Classification

Attack Type: Information Disclosure
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

Security Tracker: 1017522
CVE ID: 2007-0222 (see also: NVD) 2007-0293 (see also: NVD)
Secunia Advisory ID: 23794
SCIP VulDB ID: 2841
ISS X-Force ID: 31541
Related OSVDB ID: 32872 32875 32876 32877 32878 32880 32881 32894 32895 32906 32907
Keyword: EM05
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-01/0688.html
News Article: http://news.com.com/Oracle+plugs+51+security+flaws/2100-1002_3-6150671.html
Vendor Specific Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html
US-CERT Cyber Security Alert: TA07-017A

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/32879