Description
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
Affected products
- oracle / oracle8i8.0.3 – 8.0.3
- oracle / oracle8i8.0.4 – 8.0.4
- oracle / oracle8i8.0.5 – 8.0.5
- oracle / oracle8i8.0.5.1 – 8.0.5.1
- oracle / oracle8i8.1.5 – 8.1.5
Exploits & proofs of concept
- exploit-dbOracle 8 - oratclsh Suidby Dan Sugalski
References
- MAILING_LISThttp://marc.info/?t=92550157100002&w=2&r=1
- MAILING_LISThttp://marc.info/?l=bugtraq&m=92609807906778&w=2
Updated 33m ago · 8 sources