Description
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Affected products
- oracle / database_server7.3.3 – 7.3.3
- oracle / database_server7.3.4 – 7.3.4
- oracle / oracle8i8.0.3 – 8.0.3
- oracle / oracle8i8.0.4 – 8.0.4
- oracle / oracle8i8.0.5 – 8.0.5
- oracle / oracle8i8.0.5.1 – 8.0.5.1
- oracle / oracle8i8.1.5 – 8.1.5
Exploits & proofs of concept
- exploit-dbOracle 8 8.1.5 - Intelligent Agent (2)by Gilles PARC
- exploit-dbOracle 8 8.1.5 - Intelligent Agent (1)by Brock Tellier
References
Updated 6m ago · 8 sources