CVE-2000-0206

Medium

Published: 05/03/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

60th percentile - higher than 60% of all known CVEs

Summary

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, allowing local users to gain privileges.

Risk Assessment

Local users may exploit this vulnerability to gain unauthorized access to the system, posing a serious security threat to the organization.

Recommendation

It is recommended to restrict permissions on the orainstRoot.sh file and avoid following symlinks during software installation.

Other vulnerabilities in Oracle 8.1.5.x

See all

CVE-2000-0986Medium
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allows local users to gain privileges via a long ORACLE_HOME environmental variable.
CVE-2000-0987Medium
Buffer overflow in oidldapd in Oracle 8.1.6 allows local users to gain privileges via a long "connect" command line parameter.

Original NVD description (English source)

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.