CVE-2007-1442

CVE-2007-1442

EPSS 0.5%

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://argeniss.com/research/10MinSecAudit.zip http://osvdb.org/33979 http://secunia.com/advisories/24475 http://www.securityfocus.com/bid/22905