https://www.securityfocus.com/bid/14309
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200507-267

Oracle是一款大型的商业数据库系统，OracleReports是Oracle的一款企业报表工具。OracleReports存在任意文件覆盖漏洞。远程攻击者可以通过”..”、”C:”或在desname参数中的绝对路径序列，来覆盖服务器上的任意文件。

Oracle Oracle Reports6i 6.0.8 .19

Oracle Oracle Reports6i 6.0.8

Oracle Oracle Reports 9i

Oracle Oracle Reports 6

Oracle Oracle Reports 10g 9.0.4 .3.3

Oracle Oracle Report

来源:XF
名称:oracle-january2006-update(24321)
链接:http://xforce.iss.net/xforce/xfdb/24321
来源:BID
名称:14309
链接:http://www.securityfocus.com/bid/14309
来源:BUGTRAQ
名称:20060117OracleReports-Overwriteanyapplicationserverfileviadesname(fixedafter889days)
链接:http://www.securityfocus.com/archive/1/archive/1/422257/30/7430/threaded
来源:MISC
链接:http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html
来源:www.oracle.com
链接:http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
来源:VUPEN
名称:ADV-2006-0323
链接:http://www.frsirt.com/english/advisories/2006/0323
来源:SECTRACK
名称:1014524
链接:http://securitytracker.com/id?1014524
来源:SECUNIA
名称:18608
链接:http://secunia.com/advisories/18608
来源:SECUNIA
名称:18493
链接:http://secunia.com/advisories/18493
来源:BUGTRAQ
名称:20050719OracleSecurityAdvisory:OverwriteanyfileviadesnameinOracleReports
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=112180096507467&w;=2