CVE-2001-0943

Published: Aug 31, 2001Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.

Affected (2)

Products: Oracle: Database Server

1 product

Database Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 8.0.5
Oracle Database Server	Version 8.1.5

References (8)

http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf

Source: cve@mitre.org

http://seclists.org/lists/bugtraq/2001/Dec/0001.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/201020

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/3129

Source: cve@mitre.org

PatchVendor Advisory

http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/lists/bugtraq/2001/Dec/0001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/201020

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/3129

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.