Privilege Escalation via ORACLE_HOME Environmental Variable in dbsnmp

CVE-1999-0888 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.

Learn more about our User Device Pen Test.