CVE-2001-0942

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLEHOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLEHOME to an alternate directory that contains a malicious version of dbsnmp...

vulnerability in otrcrep binary in Oracle 8.0.5.

WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in otrcrep in Oracle 8.0.5 Date: 14-12-2000 Platform: Only tested in Linux, but can be exported to others. Impact: Any user gain euid=oracle and egid=dba. Author: Juan Manuel Pascual [email protected] Status: Vendor contacted at...