Vulnerabilities > CVE-2000-0206 - Unspecified vulnerability in Oracle Oracle8I 8.1.5

047910
CVSS 6.2 - MEDIUM
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
high complexity
oracle
exploit available

Summary

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.

Vulnerable Configurations

Part Description Count
Application
Oracle
1

Exploit-Db

descriptionOracle8i Standard Edition 8.1.5 for Linux Installer Vulnerability. CVE-2000-0206. Local exploit for linux platform
idEDB-ID:19794
last seen2016-02-02
modified2000-03-05
published2000-03-05
reporterKeyser Soze
sourcehttps://www.exploit-db.com/download/19794/
titleOracle8i Standard Edition 8.1.5 for Linux Installer Vulnerability