CVE-2001-0831

Description

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access.

Affected products

• oracle / database_server8.1.7 – 8.1.7
• oracle / database_server9.0.1 – 9.0.1

References

• MISChttp://www.iss.net/security_center/static/7344.php
• MAILING_LISThttp://marc.info/?l=bugtraq&m=100386756715645&w=2
• MISChttp://www.securityfocus.com/bid/3465
• VENDOR_ADVISORYhttp://otn.oracle.com/deploy/security/pdf/OLS817alert.pdf