CVE-2008-3997

Related Files

iDEFENSE Security Advisory 2009-01-12.4

Posted Jan 14, 2009

Authored by iDefense Labs, Code Audit Labs | Site idefense.com

iDefense Security Advisory 01.12.09 - Local exploitation of an arbitrary file rewrite vulnerability in Oracle Corp.'s Oracle Database 10g Release 2 database product allows attackers to gain elevated privileges. The vulnerability exists in a function that allows a user with an authenticated session to create any file or rewrite any files to which the database account has access. iDefense has confirmed the existence of this vulnerability in Oracle Database 10g Release 2 version 10.2.0.3.0 on 32-bit Linux platform and Windows platform. Previous versions may also be affected. Oracle Database 11g Release 1 version 11.1.0.6.0 is not affected by this vulnerability.

tags | advisory, arbitrary, local

systems | linux, windows

advisories | CVE-2008-3997

SHA-256 | 610c95b870b142b03e112907707ba9657094278aaa69f7396c8de41722da6c51

Download | Favorite | View