PT-2007-5574 · Suse · Suse Linux

Published 2007-08-17 · Updated 2008-11-15 · CVE-2007-4393

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SUSE Linux versions prior to 20070810

Description The issue concerns the installation script for orarun on SUSE Linux, which incorrectly places the oracle user into the disk group. This allows the local oracle user to read or write raw disk partitions.

Recommendations For versions prior to 20070810, consider removing the oracle user from the disk group to prevent unauthorized access to raw disk partitions. As a temporary workaround, restrict the oracle user's privileges to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-4393

Affected Products

Suse Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-4393 · Security Note
• http://novell.com/linux/security/advisories/2007_16_sr.html · Vendor Advisory
• http://secunia.com/advisories/26395 · Vendor Advisory
• http://osvdb.org/46403 · Note