Lucene search
HistoryAug 17, 2007 - 10:17 p.m.
CVE-2007-4393
orarun
suse linux
installation script
oracle user
disk group
raw disk partitions
cve-2007-4393
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.8%
The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.
Affected configurations
Node
susesuse_linux
| CPE | Name | Operator | Version |
|---|---|---|---|
| suse:suse_linux | suse suse linux | eq | * |
Related
prion
prion
Code injection
2007-08-17 22:17:00
cvelist
cvelist
CVE-2007-4393
2007-08-17 22:00:00
nvd
nvd
CVE-2007-4393
2007-08-17 22:17:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.8%
Related for CVE-2007-4393