Buffer overflow

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists DACLs, which allows local users to gain privileges...

CVE-2007-1442

CVE-2007-1442 describes a local privilege escalation in Oracle Database 10g caused by passing a NULL pDacl parameter to SetSecurityDescriptorDacl when creating discretionary access control lists (DACLs). This can allow local users to gain privileges. The description and connected records confirm ...