CVE-2000-0206

Description

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.

Affected products

• oracle / oracle8i8.1.5 – 8.1.5

Exploits & proofs of concept

• exploit-dbOracle8i Standard Edition 8.1.5 for Linux Installer - Local Privilege Escalationby Keyser Soze

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html
• MISChttp://www.securityfocus.com/bid/1035