PT-2001-1529 · Oracle · Oracle+1

Publicado 2001-04-04 · Atualizado 2017-07-11 · CVE-2001-0300

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions oidldapd version 2.1.1.1 in Oracle 8.1.7

Description The issue allows local users to potentially delete logs or overwrite other files due to world-writable permissions in the ldaplog directory. This could be achieved through a symlink attack.

Recommendations For oidldapd version 2.1.1.1 in Oracle 8.1.7, consider changing the permissions of the ldaplog directory to prevent world-writable access, thereby mitigating the risk of local users deleting logs or overwriting files via a symlink attack.

Correção

Identificadores relacionados

CVE-2001-0300

Produtos afetados

Oracle

Oidldapd

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/610904 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5804 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0300 · Nota de Segurança