CVE-2001-0943 | BDVDB-2026-3174 Detail

Description#

dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf
http://www.securityfocus.com/bid/3129
http://seclists.org/lists/bugtraq/2001/Dec/0001.html
http://www.securityfocus.com/archive/1/201020

Exploit#

No public exploit known

History#

Version 12002-02-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.