Vulnerability in Oracle Internet Directory

CVE-2001-0300

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.

EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.

Affected products

Oracle Internet_directory — versions 2.1.1.1
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)