Re: *Huge* security hole in Oracle 8.0.5 with Intellegent agent

From: Yung-Sheng Tang (jeffat_private)
Date: Wed May 05 1999 - 01:52:44 PDT

  • Next message: Dan Merillat: "Re: Possible Linuxconf Vulnerability" 

    On Tue, 4 May 1999, Paul Diehl wrote:

> On Fri, Apr 30, 1999 at 02:11:39PM +0100, Anthony Clarke wrote:
> > This hole has been verified on both Linux and Solaris with Oracle 8.0.5. It
> > probably exists in all Unix versions of 8.0.5. Whether it exists in later
> > versions is unknown. (I don't believe it exists in 8.0.4, but I can't
> > verify that at the moment)
>
> This hole exists for Oracle 8.0.3 on Solaris as well.
>

	Maybe not. Our Oracle 8.0.3 on Solaris doesn't have root-owned oratclsh.

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:45:05 PDT