Vulnerability in Oracle Application_server

CVE-2004-1707

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to…

EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.

Affected products

Oracle Application_server — versions 1.0.2, 1.0.2.1s, 1.0.2.2
Oracle Application_server_portal — versions 3.0.9.8.5, 9.0.2.3, 9.0.2.3a
Oracle Database_server_lite — versions 5.0, 5.0.1, 5.0.2
Oracle Oracle8i — versions enterprise_8.0.5_.0.0, enterprise_8.0.6_.0.0, enterprise_8.0.6_.0.1
Oracle Oracle9i — versions client_9.2.0.1, client_9.2.0.2, enterprise_9.0.1
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)