CVE-2001-0942

Published: Nov 29, 2001Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.

Affected (2)

Products: Oracle: Database Server

1 product

Database Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 8.1.6
Oracle Database Server	Version 8.1.7

References (8)

http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf

Source: cve@mitre.org

PatchVendor Advisory

http://seclists.org/lists/bugtraq/2001/Dec/0000.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/3137

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7645

Source: cve@mitre.org

http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://seclists.org/lists/bugtraq/2001/Dec/0000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3137

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7645

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.