Description

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.

Remediation

References

CVE-1999-0888

Related Vulnerabilities

WordPress Plugin ARI Adminer-WordPress Database Manager Cross-Site Request Forgery (1.1.13)

WordPress Plugin WP Content Copy Protection & No Right Click Cross-Site Request Forgery (3.1.5)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.5.7)

WordPress Plugin Jock on air now Multiple Vulnerabilities (5.6.1)

WordPress Plugin Stop User Enumeration Cross-Site Scripting (1.3.7)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-1999-0888