CVEvulnerability

CVE-2004-1707

7.2 HIGH Published 2004-07-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-07-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Affected configurations

• oracle application server • oracle application server 1.0.2 • oracle application server 1.0.2.1s • oracle application server 1.0.2.2 • oracle application server 1.0.2.2.2 • oracle application server 9.0.2 • oracle application server 9.0.2.0.0 • oracle application server 9.0.2.0.1 • oracle application server 9.0.2.1 • oracle application server 9.0.2.2 • oracle application server 9.0.2.3 • oracle application server 9.0.3 • oracle application server 9.0.3.1 • oracle application server portal 3.0.9.8.5 • oracle application server portal 9.0.2.3 • oracle application server portal 9.0.2.3a • oracle application server portal 9.0.2.3b • oracle database server lite 5.0 • oracle database server lite 5.0.1 • oracle database server lite 5.0.2 • oracle oracle8i enterprise 8.0.5 .0.0 • oracle oracle8i enterprise 8.0.6 .0.0 • oracle oracle8i enterprise 8.0.6 .0.1 • oracle oracle8i enterprise 8.1.5 .0.0 • oracle oracle8i enterprise 8.1.5 .0.2 • oracle oracle8i enterprise 8.1.5 .1.0 • oracle oracle8i enterprise 8.1.6 .0.0 • oracle oracle8i enterprise 8.1.6 .1.0 • oracle oracle8i enterprise 8.1.7 .0.0 • oracle oracle8i enterprise 8.1.7 .1.0 • oracle oracle8i standard 8.0.6 • oracle oracle8i standard 8.0.6 .3 • oracle oracle8i standard 8.1.5 • oracle oracle8i standard 8.1.6 • oracle oracle8i standard 8.1.7 • oracle oracle8i standard 8.1.7 .0.0 • oracle oracle8i standard 8.1.7 .1 • oracle oracle8i standard 8.1.7 .4 • oracle oracle9i client 9.2.0.1 • oracle oracle9i client 9.2.0.2 • oracle oracle9i enterprise 9.0.1 • oracle oracle9i enterprise 9.0.1.4 • oracle oracle9i enterprise 9.0.1.5 • oracle oracle9i enterprise 9.2.0 • oracle oracle9i enterprise 9.2.0.1 • oracle oracle9i enterprise 9.2.0.2 • oracle oracle9i enterprise 9.2.0.3 • oracle oracle9i enterprise 9.2.0.4 • oracle oracle9i personal 8.1.7 • oracle oracle9i personal 9.0.1 • oracle oracle9i personal 9.0.1.4 • oracle oracle9i personal 9.0.1.5 • oracle oracle9i personal 9.2 • oracle oracle9i personal 9.2.0.1 • oracle oracle9i personal 9.2.0.2 • oracle oracle9i personal 9.2.0.3 • oracle oracle9i personal 9.2.0.4 • oracle oracle9i standard 9.0 • oracle oracle9i standard 9.0.1 • oracle oracle9i standard 9.0.1.2 … and 10 more

References