CVE-2001-0831: Medium severity oracle database server vulnerability

Published Nov 22, 2001

Updated

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SETLABEL, or SQLPredicate is being used, allows local users to gain additional access.

Affected Software

2 affected components

Oracle Database Server=8.1.7

Oracle Database Server=9.0.1

Remediation

Patch Available

http://otn.oracle.com/deploy/security/pdf/OLS817alert.pdf

Event History

Nov 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0831?

CVE-2001-0831 is considered a high severity vulnerability due to the potential for local users to gain unauthorized access.

How do I fix CVE-2001-0831?

To mitigate CVE-2001-0831, it is recommended to upgrade Oracle Label Security to a version where the vulnerability is resolved.

Which versions of Oracle Database are affected by CVE-2001-0831?

CVE-2001-0831 affects Oracle Database versions 8.1.7 and 9.0.1.

Who is impacted by CVE-2001-0831?

Local users of the affected Oracle Database versions may exploit CVE-2001-0831 to gain additional access beyond their intended permissions.

What kind of access can be gained through CVE-2001-0831?

CVE-2001-0831 allows local users to bypass security measures, thereby gaining unauthorized access to restricted resources.