PT-2000-1896 · Oracle · Oracle

Published 2000-12-19 · Updated 2017-12-19 · CVE-2000-0986

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle versions 8.1.5

Description A buffer overflow issue exists in certain Oracle 8.1.5 applications, including names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute. This issue may allow local users to gain privileges by exploiting a long ORACLE HOME environmental variable.

Recommendations For Oracle version 8.1.5, consider restricting the length of the ORACLE HOME environmental variable to prevent potential exploitation. Additionally, monitor and limit local user access to the affected applications to minimize the risk of privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0986

Affected Products

Oracle

References · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0986 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5390 · Note