Description

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.

Remediation

References

CVE-2001-0942

Related Vulnerabilities

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder SQL Injection (1.07.12)

Oracle Database Server CVE-2009-1966 Vulnerability (CVE-2009-1966)

PostgreSQL Improper Input Validation Vulnerability (CVE-2019-10210)

ReviveAdserver Session Fixation Vulnerability (CVE-2017-5831)

Ruby Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-31810)

Severity

Medium

Classification

CVE-2001-0942

Tags

Missing Update Known Vulnerabilities