CVE-2001-0832 — Oracle Database Server vulnerability

3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.2%
top 52.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Database Server
Timeline
PublishedDec 6
Latest updateApr 30

Description

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: otn.oracle.com ↗Patch: otn.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8x7r-52w5-mjv9: Vulnerability in Oracle 8↗2022-04-30
▶
CVEList
CVE-2001-0832: Vulnerability in Oracle 8↗2001-11-22
▶
CVE-2001-0832 — Oracle Database Server vulnerability | cvebase