4.6
CVSSv2

CVE-2001-0941

Published: 30/11/2001 Updated: 11/07/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in dbsnmp in Oracle 8.0.6 up to and including 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.

Vulnerable Product Search on Vulmon Subscribe to Product

oracle database server 8.1.7

oracle database server 9.0.1

oracle database server 8.0.6

oracle database server 8.1.6

Exploits

source: wwwsecurityfocuscom/bid/3138/info Oracle is an Enterprise level SQL database, supporting numerous features and options It is distributed and maintained by Oracle Corporation When the ORACLE_HOME environment variable is filled with 750 bytes or more, a buffer overflow occurs This overflow may be used to overwrite variables on t ...