CVE-2000-0986: Buffer Overflow

Published Nov 29, 2000

Updated

Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLEHOME environmental variable.

Affected Software

1 affected component

Oracle Oracle8i=8.1.5

Event History

Nov 29, 2000

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0986?

CVE-2000-0986 is considered a high severity vulnerability due to the potential for local privilege escalation.

How do I fix CVE-2000-0986?

To mitigate CVE-2000-0986, it's recommended to upgrade to a version of Oracle 8i that is not affected by this buffer overflow.

Who is affected by CVE-2000-0986?

CVE-2000-0986 affects local users of Oracle 8i version 8.1.5 and certain associated applications.

What is the nature of the vulnerability in CVE-2000-0986?

CVE-2000-0986 is a buffer overflow vulnerability caused by overly long ORACLE_HOME environmental variables.

Can CVE-2000-0986 be exploited remotely?

CVE-2000-0986 is not a remote vulnerability; it requires local access to the affected machine to exploit.