Description

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Remediation

References

CVE-2004-1707

Related Vulnerabilities

Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800)

WordPress Plugin Slider Hero with Animation, Video Background SQL Injection (8.2.6)

Oracle Application Server Other Vulnerability (CVE-2002-0656)

Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2017-7536)

Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-3493)

Severity

High

Classification

CVE-2004-1707

Tags

Missing Update Known Vulnerabilities