CVE-2005-0298

Published: May 2, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.

Affected (12)

Products: Oracle: Database Server

Oracle

1 product

Database Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 10.1.0.2
Oracle Database Server	Version 10.1.0.3.1
Oracle Database Server	Version 10.1.0.3
Oracle Database Server	Version 8.0.6.3
Oracle Database Server	Version 8.0.6
Oracle Database Server	Version 8.1.7.4
Oracle Database Server	Version 9.0.1.4
Oracle Database Server	Version 9.0.1.5
Oracle Database Server	Version 9.0.4
Oracle Database Server	Version 9.2.0.4
Oracle Database Server	Version 9.2.0.5
Oracle Database Server	Version 9.2.0.6