Security Advisory

CVE-2001-0942

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-02-02 05:00:00
Last updated 2024-08-08 04:37:06
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.