CVE-2000-0206: Medium severity oracle oracle8i vulnerability
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
After installation, remove the world-writeable permission from orainstRoot.sh so it is not writable by all users (for example: chmod 700 /path/to/orainstRoot.sh). Ensure only authorized administrative accounts can modify this file.
Oracle Database 8.1.5.x installer (orainstRoot.sh) file_permissions = remove world-writable - Compensating control
During installation, ensure installation directories are not writable by unprivileged users and perform installations from a secure administrative account. Restrict the ability of local users to create symlinks or write in Oracle installation directories until a vendor fix is available.
- Operational
Scan Linux systems for orainstRoot.sh files created by Oracle 8.1.5.x. For any instances found with world-writable permissions, immediately remove the world-writable bit (chmod as above), review the file and system for signs of unauthorized modification or privilege escalation, and remediate any compromises.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0206?
CVE-2000-0206 is considered to have a high severity due to its potential for privilege escalation.
How do I fix CVE-2000-0206?
To fix CVE-2000-0206, ensure that the orainstRoot.sh file is set to the correct permissions and does not retain world-writeable settings.
What are the potential impacts of exploiting CVE-2000-0206?
Exploiting CVE-2000-0206 can allow local users to gain elevated privileges on the system.
Which versions of Oracle are affected by CVE-2000-0206?
CVE-2000-0206 affects Oracle 8i version 8.1.5 running on Linux.
Is there a workaround for CVE-2000-0206?
A workaround for CVE-2000-0206 involves adjusting file permissions to restrict access to the orainstRoot.sh file.