CVE-2001-0943

State: Published
Severity: Not scored
Published: Feb 2, 2002
Updated: Aug 8, 2024
Reserved: Jan 31, 2002

Description

dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf
3129vdb-entry
20011130 ASI Oracle Security Alert: CHOWN Path Environment Variable Vulnerabilitymailing-list
20010801 Oracle 8.1.5 dbnsmp vulnerabilitymailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.