| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 1.0.2= 1.0.2.1s= 1.0.2.2= 1.0.2.2.2= 9.0.2= 9.0.2.0.0= 9.0.2.0.1= 9.0.2.1= 9.0.2.2= 9.0.2.3= 9.0.3= 9.0.3.1 | |
| application server portal | = 3.0.9.8.5= 9.0.2.3= 9.0.2.3a= 9.0.2.3b | |
| database server lite | = 5.0= 5.0.1= 5.0.2 | |
| oracle8i | = enterprise_8.0.5_.0.0= enterprise_8.0.6_.0.0= enterprise_8.0.6_.0.1= enterprise_8.1.5_.0.0= enterprise_8.1.5_.0.2= enterprise_8.1.5_.1.0= enterprise_8.1.6_.0.0= enterprise_8.1.6_.1.0= enterprise_8.1.7_.0.0= enterprise_8.1.7_.1.0= standard_8.0.6= standard_8.0.6_.3= standard_8.1.5= standard_8.1.6= standard_8.1.7= standard_8.1.7_.0.0= standard_8.1.7_.1= standard_8.1.7_.4 | |
| oracle9i | = client_9.2.0.1= client_9.2.0.2= enterprise_9.0.1= enterprise_9.0.1.4= enterprise_9.0.1.5= enterprise_9.2.0= enterprise_9.2.0.1= enterprise_9.2.0.2= enterprise_9.2.0.3= enterprise_9.2.0.4= personal_8.1.7= personal_9.0.1= personal_9.0.1.4= personal_9.0.1.5= personal_9.2= personal_9.2.0.1= personal_9.2.0.2= personal_9.2.0.3= personal_9.2.0.4= standard_9.0= standard_9.0.1= standard_9.0.1.2= standard_9.0.1.3= standard_9.0.1.4= standard_9.0.1.5= standard_9.0.2= standard_9.2= standard_9.2.0.1= standard_9.2.0.2= standard_9.2.0.3= standard_9.2.0.4= standard_9.2.3 |
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free