medium4.6Public exploit code
CVE-1999-0888
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmico…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle 8 8.1.5 - Intelligent Agent (2)1999-08-16 · local · multiple · Verified
- Oracle 8 8.1.5 - Intelligent Agent (1)1999-08-16 · local · multiple · Verified
Impact
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database Server | Versions 7.3.3, 7.3.4 |
| Oracle | Oracle8i | Versions 8.0.3, 8.0.4, 8.0.5, 8.0.5.1, 8.1.5 |