Описание
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:oracle:database_server:8.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:8.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:9.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00293
Низкий
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
EPSS
Процентиль: 52%
0.00293
Низкий
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other