$ cve CVE-2006-7141 JSON

CVE-2006-7141 EXPLOIT

6.0

MEDIUM · CVSS 2.0 · EPSS 5.7% (pctl 93)

Patch early

A public exploit exists.

Description

Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such as (1) utl_file.put_line and (2) utl_file.get_line, a related issue to CVE-2005-0701. NOTE: this issue is disputed by third parties who state that this is due to an insecure configuration instead of an inherent vulnerability

Scoring

CVSS	6.0 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS	5.65% — more likely to be exploited than 93% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-03-07
Last modified	2026-06-16

Affected (1)

Vendor	Product
oracle	database server

Public exploits

Source	Title	Date
exploit-db	Oracle 9i/10g - 'utl_file' FileSystem Access	2006-12-19

References

→ the Explorer · watch your stack · NVD