Page 4 of 17 results (0.003 seconds)

CVSS: 2.1EPSS: 0%CPEs: 3EXPL: 0

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable. • http://marc.info/?l=bugtraq&m=100395579811880&w=2 http://marc.info/?l=bugtraq&m=99677282117387&w=2 http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf http://www.securityfocus.com/bid/3135 •

CVSS: 4.6EPSS: 0%CPEs: 7EXPL: 2

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script. • https://www.exploit-db.com/exploits/19460 https://www.exploit-db.com/exploits/19461 http://www.securityfocus.com/bid/585 •