PT-2001-1999 · Oracle · Oracle Label Security+1

Published 2001-11-22 · Updated 2016-10-18 · CVE-2001-0831

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle versions 8.1.7 and 9.0.1

Description The issue concerns an unknown vulnerability in Oracle Label Security. It affects local users when certain features such as audit functionality, SET LABEL, or SQL*Predicate are in use, allowing them to gain additional access.

Recommendations For Oracle version 8.1.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Oracle version 9.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-0831

Affected Products

Oracle

Oracle Label Security

References · 6

• http://otn.oracle.com/deploy/security/pdf/OLS817alert.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0831 · Security Note
• http://iss.net/security_center/static/7344.php · Note
• http://securityfocus.com/bid/3465 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0831 · Note
• http://marc.info/?l=bugtraq&m=100386756715645&w=2 · Note