Code injection

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions...

CVE-2007-4393

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions...

CVE-2007-4393

The CVE-2007-4393 entry describes a local privilege issue in SUSE Linux where the orarun installation script adds the oracle user to the disk group before 20070810, allowing that local oracle user to read or write raw disk partitions. The vulnerability arises from disk group membership enabling a...

CVE-2007-4393

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions...

Дырка в kcsd под Linux

kcsd использует внешний shell определяемый переменной SHELL, которая задается пользователем. Таким образом, подменив SHELL можно получить привелегии группы disk, позволяющие менять разрешения любых файлов...