Description

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.

Remediation

References

CVE-2001-1041

Related Vulnerabilities

Jboss EAP CVE-2013-1862 Vulnerability (CVE-2013-1862)

WordPress Plugin TR Easy Google Analytics Cross-Site Scripting (1.0.0)

WordPress Plugin Pinterest Badge Cross-Site Scripting (1.9.0)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12706)

WordPress Plugin Directories Pro Cross-Site Scripting (1.3.45)

Severity

Low

Classification

CVE-2001-1041

Tags

Missing Update Known Vulnerabilities