Allround Automations PL/SQL Developer Local Privilege Escalation Vulnerability

Bugtraq ID:	49467
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Sep 06 2011 12:00AM
Updated:	Sep 06 2011 12:00AM
Credit:	Reported by the vendor
Vulnerable:	Allround Automations PL/SQL Developer 9.0
Not Vulnerable:	Allround Automations PL/SQL Developer 9.0.1

Allround Automations PL/SQL Developer Local Privilege Escalation Vulnerability

Allround Automations PL/SQL Developer is prone to a local privilege-escalation vulnerability.

Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition.

Versions prior to Allround Automations PL/SQL Developer 9.0.1 are vulnerable.

Allround Automations PL/SQL Developer Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Allround Automations PL/SQL Developer Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Allround Automations PL/SQL Developer Local Privilege Escalation Vulnerability

References:

• PL/SQL Developer 9.0.1 Release Notes (Allround Automations)
  
• PL/SQL Developer Homepage (Allround Automations)