medium4.6Public exploit code
CVE-2001-0941
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle 8/9i - DBSNMP Oracle Home Environment Variable Buffer Overflow2001-08-02 · local · windows · Verified
Impact
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database Server | Versions 8.0.6, 8.1.6, 8.1.7, 9.0.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=100716693806967&w=2
- http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf
- http://www.securityfocus.com/bid/3138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7643
- http://marc.info/?l=bugtraq&m=100716693806967&w=2
- http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf
- http://www.securityfocus.com/bid/3138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7643