PT-2000-1896 · Oracle · Oracle

Publicado 2000-12-19 · Atualizado 2017-12-19 · CVE-2000-0986

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle versions 8.1.5

Description A buffer overflow issue exists in certain Oracle 8.1.5 applications, including names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute. This issue may allow local users to gain privileges by exploiting a long ORACLE HOME environmental variable.

Recommendations For Oracle version 8.1.5, consider restricting the length of the ORACLE HOME environmental variable to prevent potential exploitation. Additionally, monitor and limit local user access to the affected applications to minimize the risk of privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0986

Produtos afetados

Oracle

Referências · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0986 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5390 · Nota