CVE-2000-0986
MediumExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allows local users to gain privileges via a long ORACLE_HOME environmental variable.
Risk Assessment
Possible privilege escalation by a local user, which may lead to full compromise of the system and database.
Recommendation
Update Oracle 8.1.5 to a newer version or apply available patches; restrict local access to the listed applications and control environmental variables.
Other vulnerabilities in Oracle
See all- CVE-2000-0987Medium
Buffer overflow in oidldapd in Oracle 8.1.6 allows local users to gain privileges via a long "connect" command line parameter.
- CVE-2000-0206Medium
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, allowing local users to gain privileges.
Original NVD description (English source)
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.