Oracle 9iAS XSQL Servlet File Permission Bypass Vulnerability

	Oracle 9iAS XSQL Servlet File Permission Bypass Vulnerability
	Posted by: Nikola Strahija on March 17, 2002
	Oracle 9iAS package includes the XSQL Servlet as part of the XML Development kit. It may be used to convert the response from an SQL query into an XML format.

	Reportedly, the servlet does not properly enforce file permissions. An attacker may be able to exploit this vulnerability to view sensitive system configuration files, similar to the issues discussed in BID 4290. Remote: Yes Exploit: No exploit is required.


	Our Services	Information	Our Online Shop	Community Forum Topics


	Free weekly Newsletter Advertise on Xatrix Monthly News Archive Community Forum	Impressum/about Contributing Newsletter archive Latest bugs	Top sellers New Items Books Software	Poll: Do you have A... Change internet fil... Thread Game Potential Exe Exploit

Our Privacy Policy \| Contact Us Powered by TiP / Rapid IT \| HITB.org All contents © 2000 - 2006 Xatrix Security. All Rights Reserved.