Oracle9i Database - Default Library Directory Privilege Escalation

ID EDB-ID:24335
Type exploitdb
Reporter Juan Manuel Pascual Escribá
Modified 2004-07-30T00:00:00



Oracle database implementations are reportedly prone to a default library directory privilege escalation vulnerability. This issue arises due to a default configuration error that will permit the attacker to replace libraries required by setuid root applications with arbitrary code.

This issue would allow an Oracle software owner to execute code as the superuser, taking control of the entire system.

It should be noted that this vulnerability only affects Oracle on UNIX/Linux platforms.


_init() {
printf("en el _init()\n");
printf("Con PID=%i y EUID=%i",getpid(),getuid());
printf("Saliendo del Init()\n");