CVE-2004-1707

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.57% chance of exploitation in the next 30 days, 84th percentile

Published

2005-02-26

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24335

References

• CVE Record
• NVD entry

Related

• CVE-2004-1705
• CVE-2004-1714
• CVE-2004-1704
• CVE-2004-1717
• CVE-2004-1703
• CVE-2004-1719