CVE-2001-0941: Buffer Overflow
Published Nov 30, 2001
·Updated
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLEHOME environment variable.
Affected Software
4 affected components
Oracle Database Server=8.0.6
Oracle Database Server=8.1.6
Oracle Database Server=8.1.7
Oracle Database Server=9.0.1
Remediation
Patch Available
Event History
Nov 30, 2001
CVE Published
05:00 AM
Feb 2, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0941?
CVE-2001-0941 is considered a critical vulnerability due to its potential to allow local users to execute arbitrary code.
2
How do I fix CVE-2001-0941?
To fix CVE-2001-0941, it is recommended to upgrade to a patched version of Oracle Database that addresses this buffer overflow issue.
3
Which versions of Oracle are affected by CVE-2001-0941?
CVE-2001-0941 affects Oracle Database versions 8.0.6 through 9.0.1.
4
Who can exploit CVE-2001-0941?
CVE-2001-0941 can be exploited by local users who can set the ORACLE_HOME environment variable to a long value.
5
What is the impact of exploiting CVE-2001-0941?
Exploiting CVE-2001-0941 can lead to executing arbitrary code, resulting in system compromise and loss of data integrity.