Локальная дырка в Oracle 8 (cmctl buffer overflow)

Переполнение буфера в cmctl позволяет получить euid=oracle и egid=dba...

Oracle 8 8.1.5 - Intelligent Agent (1)

source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid root a...