CVE Catalog
CVE-1999-0888
MediumExploitation Probability (EPSS)
Elevated risk1.08%
61th percentile - higher than 61% of all known CVEs
Summary
A vulnerability in dbsnmp in Oracle Intelligent Agent allows local users to gain elevated privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to locate the nmiconf.tcl script.
Risk Assessment
The organization may be exposed to unauthorized access to systems and data, potentially leading to serious security breaches.
Recommendation
It is recommended to restrict access to the ORACLE_HOME environmental variable and to monitor and audit local user activities.
Original NVD description (English source)
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.