PT-2001-2094 · Oracle · Oracle

Published 2001-11-30 · Updated 2017-07-11 · CVE-2001-0941

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle versions 8.0.6 through 9.0.1

Description A buffer overflow issue exists in the dbsnmp component, allowing local users to execute arbitrary code by manipulating the ORACLE HOME environment variable, specifically by setting it to a long value.

Recommendations For Oracle versions 8.0.6 through 9.0.1, consider restricting access to the dbsnmp component until a fix is available, and avoid using long values for the ORACLE HOME environment variable to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-0941

Affected Products

Oracle

References · 7

• 🔥 https://exploit-db.com/exploits/21044 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0941 · Security Note
• http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0941 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7643 · Note
• http://marc.info/?l=bugtraq&m=100716693806967&w=2 · Note
• http://securityfocus.com/bid/3138 · Note