NVD

Id
72086  
Name
CVE-2004-1707  
Description
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-07-30  
Modified Date
2017-07-10  
Seq
2004-1707  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
372410 72086 CVE-2004-1707 20040802 OPEN3S - Local Privilege Elevation through Oracle products (Unix Platform)  View
372411 72086 CVE-2004-1707 10829  View
372412 72086 CVE-2004-1707 oracle-libraries-gain-privileges(16839)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62957 JVNDB-2004-000299 Oracle 製品のインストール処理における権限昇格の脆弱性 Oracle Application Server、Oracle Database には、インストール時に提供される Oracle ライブラリを含むディレクトリの所有者が適切に設定されない不備が存在するため、権限昇格の脆弱性が存在します。 CVE-2004-1707 10134 CVE-2004-1707 72086 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000299.html 2004-08-02 2007-04-01 View