Description

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Remediation

References

CVE-2004-1707

Related Vulnerabilities

WordPress Plugin WP Security Safe Cross-Site Request Forgery (2.2.2)

silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4959)

WordPress Plugin WP-VR-view-Add Photo Sphere, 360 video to WordPress Cross-Site Scripting (1.6)

WordPress Plugin ByREV WP-PICShield Cross-Site Request Forgery (1.9.7)

Lighttpd NULL Pointer Dereference Vulnerability (CVE-2022-37797)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2004-1707