Vulnerability in Oracle Database Server

CVE-1999-0888

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.

EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 7.3.3, 7.3.4
Oracle Oracle8i — versions 8.0.3, 8.0.4, 8.0.5
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)