Description

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

Remediation

References

CVE-2007-1442

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2001-1342)

WordPress Plugin OptionTree PHP Object Injection (2.6.0)

WordPress Plugin AskApache Firefox Adsense Cross-Site Request Forgery (3.0)

WordPress Plugin RSVPMaker SQL Injection (6.1.9)

MySQL CVE-2013-3811 Vulnerability (CVE-2013-3811)

Severity

High

Classification

CVE-2007-1442

Tags

Missing Update Known Vulnerabilities