Code injection

2007-08-1722:17:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

JSON

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.

References

osvdb.org/46403

secunia.com/advisories/26395

www.novell.com/linux/security/advisories/2007_16_sr.html