Oracle Database DIRECTORY Object Access Control Flaw May Let Certain Users Access Other Directories
Categorie: Vulnerability Posted: 2005-01-20 by ReCall Views: 353 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in the Oracle Database in controlling access to DIRECTORY objects. A remote authenticated user can access data located outside of the specified DIRECTORY object.
Pete Finnigan reported that a remote authenticated user with DIRECTORY read privileges can read information from locations on the system that are outside of the DIRECTORY object location.
