Description

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.

Remediation

References

CVE-2001-1041

Related Vulnerabilities

Jenkins CVE-2013-0158 Vulnerability (CVE-2013-0158)

Ruby Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-8780)

WordPress 5.5.x PHP Object Injection (5.5 - 5.5.4)

WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)

WordPress Plugin Default Facebook Thumbnails Multiple Vulnerabilities (0.4)

Severity

Low

Classification

CVE-2001-1041

Tags

Missing Update Known Vulnerabilities