CVE-1999-0888: Medium severity Oracle Database Server vulnerability
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLEHOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Oracle Intelligent Agent (dbsnmp)from your environment.If the Oracle Intelligent Agent (dbsnmp) is not required, disable or uninstall the dbsnmp component to eliminate the vulnerable service.
- Configuration
Ensure dbsnmp startup scripts explicitly set and export ORACLE_HOME to the correct Oracle home and sanitize or clear any user-supplied environment before launching dbsnmp so unprivileged local users cannot influence ORACLE_HOME.
Oracle Intelligent Agent (dbsnmp) ORACLE_HOME environment variable = set to the Oracle installation path and not inherited from unprivileged user environments - Configuration
Ensure nmiconf.tcl and related Oracle Intelligent Agent files are owned by the Oracle installation owner and have file permissions/ACLs that prevent modification by unprivileged local users.
nmiconf.tcl script file filesystem permissions = not writable by unprivileged local users - Compensating control
Restrict local access to hosts running the Oracle Intelligent Agent to trusted administrators only (remove or limit shell/logon access for unprivileged accounts) and apply OS-level access controls to prevent unprivileged users from setting environment variables or modifying agent files.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0888?
CVE-1999-0888 has a critical severity rating as it allows local users to escalate privileges.
How do I fix CVE-1999-0888?
To fix CVE-1999-0888, ensure that the ORACLE_HOME environmental variable is not misconfigured and restrict user permissions accordingly.
Which Oracle versions are affected by CVE-1999-0888?
CVE-1999-0888 affects Oracle Database versions 7.3.3, 7.3.4 and Oracle 8i versions 8.0.3, 8.0.4, 8.0.5, 8.0.5.1, and 8.1.5.
What type of vulnerability is CVE-1999-0888?
CVE-1999-0888 is a local privilege escalation vulnerability.
Can a network attack exploit CVE-1999-0888?
CVE-1999-0888 cannot be exploited remotely as it requires local access to the system.