← back
CVE-2001-0943

CVE-2001-0943

EPSS 2.0%
dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdfhttp://seclists.org/lists/bugtraq/2001/Dec/0001.htmlhttp://www.securityfocus.com/archive/1/201020http://www.securityfocus.com/bid/3129