CVE-2001-0832: Low severity Oracle Database Server vulnerability
Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLEHOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLEHOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0832?
CVE-2001-0832 is considered a medium severity vulnerability due to its potential for local file overwrites.
How do I fix CVE-2001-0832?
To fix CVE-2001-0832, ensure that the file permissions in the ORACLE_HOME/rdbms/log directory are correctly set to prevent unauthorized access.
Who is affected by CVE-2001-0832?
CVE-2001-0832 affects local users of Oracle Database versions 8.0.x through 9.0.1 on Unix systems.
What is a symlink attack related to CVE-2001-0832?
A symlink attack in the context of CVE-2001-0832 involves creating a symbolic link to manipulate file permissions and overwrite files.
What versions of Oracle Database are vulnerable to CVE-2001-0832?
The vulnerable versions of Oracle Database for CVE-2001-0832 include 8.0.x, 8.1, and up to 9.0.1.