Vulnerabilities > Oracle > Low

DATE CVE VULNERABILITY TITLE RISK
2001-08-31 CVE-2001-1041 Unspecified vulnerability in Oracle Database Server 8.0/8.1/9.0.1
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
local
low complexity
oracle
2.1
2001-06-02 CVE-2001-0300 Local Security vulnerability in Oracle Internet Directory 2.1.1.1
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.
local
low complexity
oracle
2.1