Oracle Database 10g Installer Insecure Temporary File Creation Vulnerability
BID:10656
Info
Oracle Database 10g Installer Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 10656 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 05 2004 12:00AM |
| Updated: | Jul 05 2004 12:00AM |
| Credit: | Discovery is credited to Knud Erik Højgaard. |
| Vulnerable: |
Oracle Oracle10g Standard Edition 10.1 .0.2 Oracle Oracle10g Personal Edition 10.1 .0.2 Oracle Oracle10g Enterprise Edition 10.1 .0.2 Oracle Oracle10g Application Server 10.1 .0.2 |
| Not Vulnerable: | |
Discussion
Oracle Database 10g Installer Insecure Temporary File Creation Vulnerability
Oracle Database 10g installer application is reported prone to an insecure temporary file creation vulnerability.
It is reported that this issue occurs because the installer application creates certain files in the '/tmp' directory with '777' privileges.
Exploitation of this issue can potentially allow a local user to overwrite files during the installation process.
Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.
Oracle Database 10g installer application is reported prone to an insecure temporary file creation vulnerability.
It is reported that this issue occurs because the installer application creates certain files in the '/tmp' directory with '777' privileges.
Exploitation of this issue can potentially allow a local user to overwrite files during the installation process.
Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.
Exploit / POC
Oracle Database 10g Installer Insecure Temporary File Creation Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Oracle Database 10g Installer Insecure Temporary File Creation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Oracle Database 10g Installer Insecure Temporary File Creation Vulnerability
References:
References:
- Oracle Homepage (Oracle)