PT-2007-5574 · Suse · Suse Linux

Publicado 2007-08-17 · Atualizado 2008-11-15 · CVE-2007-4393

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SUSE Linux versions prior to 20070810

Description The issue concerns the installation script for orarun on SUSE Linux, which incorrectly places the oracle user into the disk group. This allows the local oracle user to read or write raw disk partitions.

Recommendations For versions prior to 20070810, consider removing the oracle user from the disk group to prevent unauthorized access to raw disk partitions. As a temporary workaround, restrict the oracle user's privileges to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-4393

Produtos afetados

Suse Linux

Referências · 4

• http://osvdb.org/46403 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4393 · Nota de Segurança
• http://novell.com/linux/security/advisories/2007_16_sr.html · Aviso do Fabricante
• http://secunia.com/advisories/26395 · Aviso do Fabricante