CVE-2000-0206

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.

Score

CVSS 2.0 6.2 Medium

Status

Modified - cve@mitre.org

Published

2000-03-05

Last modified

2024-08-08

Affected products

• Oracle8i (Oracle)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html
• http://www.securityfocus.com/bid/1035