online security computer security vulnerabilities information security
pix Xatrix Security
 
pix
Main
Security
Downloads
Forum
Free e-books
Security
Advisories
Vulnerabilities
IT News
Virus Central
Services
Advertise
Newsletter
Shop
Search
Wap-PDA/mobile
Other
Affiliates
Contact
RSS feeds
Computer, Online and Information Security News
  Show printable version  Show printable version  |   Send this article to a friend  Send this article to a friend  

Oracle 9iAS XSQL Servlet File Permission Bypass Vulnerability
Posted by: Nikola Strahija on March 17, 2002

Oracle 9iAS package includes the XSQL Servlet as part of the XML Development kit. It may
be used to convert the response from an SQL query into an XML format.
Reportedly, the servlet does not properly enforce file permissions. An attacker may be able to exploit this vulnerability to view sensitive system configuration files, similar to the issues discussed in BID 4290.

Remote: Yes

Exploit: No exploit is required.
Xatrix Security
Show printable version  Show printable version  |   Send this article to a friend  Send this article to a friend  
Latest information, online and computer Security News
Hack Attack: Get Windows XP SP3 Throu...  (Nov 29, 2007)
TPB files charges against media compa...  (Sep 22, 2007)
Storm worm: again.  (Aug 7, 2007)
Onslaught on .ORGs  (Feb 7, 2007)
OpenOffice.org insecure  (Aug 12, 2006)
Latest Vendor Advisories
Firefox vulnerabilities
Ruby safe-level vulnerability
Seamonkey critical security vulnerabilities
Drupal several remote vulnerabilities
Kernel local race condition
  Our Services     Information     Our Online Shop     Community Forum Topics
  Free weekly Newsletter
Advertise on Xatrix
Monthly News Archive
Community Forum		   Impressum/about
Contributing
Newsletter archive
Latest bugs		   Top sellers
New Items
Books
Software		   Wolfenstein (2009) ...
Pars Workstation
iphone 3GS {16 &...
Mistery Path N:1\ v...
Our Privacy Policy | Contact Us
Powered by TiP / Rapid IT | HITB.org
All content on this website is property of Xatrix Security if not noted otherwise.
Copyright 2000 - 2010 Xatrix Security
Get news on your PDA or mobile phone Latest events Search our extensive database Get the latest books and software Download the latest tools Contact Us Advertise on Xatrix Security