PT-2001-2094 · Oracle · Oracle

Publicado 2001-11-30 · Atualizado 2017-07-11 · CVE-2001-0941

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle versions 8.0.6 through 9.0.1

Description A buffer overflow issue exists in the dbsnmp component, allowing local users to execute arbitrary code by manipulating the ORACLE HOME environment variable, specifically by setting it to a long value.

Recommendations For Oracle versions 8.0.6 through 9.0.1, consider restricting access to the dbsnmp component until a fix is available, and avoid using long values for the ORACLE HOME environment variable to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0941

Produtos afetados

Oracle

Referências · 7

• 🔥 https://exploit-db.com/exploits/21044 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0941 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7643 · Nota
• http://marc.info/?l=bugtraq&m=100716693806967&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0941 · Nota de Segurança
• http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf · Aviso do Fabricante
• http://securityfocus.com/bid/3138 · Nota