CVE Catalog

CVE-2000-0206

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.07%

60th percentile - higher than 60% of all known CVEs

Summary

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, allowing local users to gain privileges.

Risk Assessment

Local users may exploit this vulnerability to gain unauthorized access to the system, posing a serious security threat to the organization.

Recommendation

It is recommended to restrict permissions on the orainstRoot.sh file and avoid following symlinks during software installation.

Original NVD description (English source)

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS