CVE-2004-1707: High severity Oracle Application Server vulnerability

Published Jul 30, 2004

Updated

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Affected Software

70 affected components

Oracle Application Server

Oracle Application Server=1.0.2

Oracle Application Server=1.0.2.1s

Oracle Application Server=1.0.2.2

Oracle Application Server=1.0.2.2.2

Oracle Application Server=9.0.2

Oracle Application Server=9.0.2.0.0

Oracle Application Server=9.0.2.0.1

Oracle Application Server=9.0.2.1

Oracle Application Server=9.0.2.2

Oracle Application Server=9.0.2.3

Oracle Application Server=9.0.3

Oracle Application Server=9.0.3.1

Oracle Application Server Portal=3.0.9.8.5

Oracle Application Server Portal=9.0.2.3

Oracle Application Server Portal=9.0.2.3a

Oracle Application Server Portal=9.0.2.3b

Oracle Database Server Lite=5.0

Oracle Database Server Lite=5.0.1

Oracle Database Server Lite=5.0.2

Oracle Oracle8i=enterprise_8.0.5_.0.0

Oracle Oracle8i=enterprise_8.0.6_.0.0

Oracle Oracle8i=enterprise_8.0.6_.0.1

Oracle Oracle8i=enterprise_8.1.5_.0.0

Oracle Oracle8i=enterprise_8.1.5_.0.2

Oracle Oracle8i=enterprise_8.1.5_.1.0

Oracle Oracle8i=enterprise_8.1.6_.0.0

Oracle Oracle8i=enterprise_8.1.6_.1.0

Oracle Oracle8i=enterprise_8.1.7_.0.0

Oracle Oracle8i=enterprise_8.1.7_.1.0

Oracle Oracle8i=standard_8.0.6

Oracle Oracle8i=standard_8.0.6_.3

Oracle Oracle8i=standard_8.1.5

Oracle Oracle8i=standard_8.1.6

Oracle Oracle8i=standard_8.1.7

Oracle Oracle8i=standard_8.1.7_.0.0

Oracle Oracle8i=standard_8.1.7_.1

Oracle Oracle8i=standard_8.1.7_.4

Oracle Oracle9i=client_9.2.0.1

Oracle Oracle9i=client_9.2.0.2

Oracle Oracle9i=enterprise_9.0.1

Oracle Oracle9i=enterprise_9.0.1.4

Oracle Oracle9i=enterprise_9.0.1.5

Oracle Oracle9i=enterprise_9.2.0

Oracle Oracle9i=enterprise_9.2.0.1

Oracle Oracle9i=enterprise_9.2.0.2

Oracle Oracle9i=enterprise_9.2.0.3

Oracle Oracle9i=enterprise_9.2.0.4

Oracle Oracle9i=personal_8.1.7

Oracle Oracle9i=personal_9.0.1

Oracle Oracle9i=personal_9.0.1.4

Oracle Oracle9i=personal_9.0.1.5

Oracle Oracle9i=personal_9.2

Oracle Oracle9i=personal_9.2.0.1

Oracle Oracle9i=personal_9.2.0.2

Oracle Oracle9i=personal_9.2.0.3

Oracle Oracle9i=personal_9.2.0.4

Oracle Oracle9i=standard_9.0

Oracle Oracle9i=standard_9.0.1

Oracle Oracle9i=standard_9.0.1.2

Oracle Oracle9i=standard_9.0.1.3

Oracle Oracle9i=standard_9.0.1.4

Oracle Oracle9i=standard_9.0.1.5

Oracle Oracle9i=standard_9.0.2

Oracle Oracle9i=standard_9.2

Oracle Oracle9i=standard_9.2.0.1

Oracle Oracle9i=standard_9.2.0.2

Oracle Oracle9i=standard_9.2.0.3

Oracle Oracle9i=standard_9.2.0.4

Oracle Oracle9i=standard_9.2.3

Remediation

Patch Available

http://secunia.com/advisories/12205

Event History

Jul 30, 2004

CVE Published

04:00 AM

Feb 26, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1707?

CVE-2004-1707 is considered to be a critical vulnerability due to its potential to allow unauthorized users to gain root privileges.

How do I fix CVE-2004-1707?

To fix CVE-2004-1707, it is recommended to update to a patched version of the affected Oracle software or adjust the library paths used by the dbsnmp and nmo programs to prevent the execution of modified libraries.

Which software is affected by CVE-2004-1707?

CVE-2004-1707 affects Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1 on Unix systems.

What impact does CVE-2004-1707 have on system security?

The impact of CVE-2004-1707 on system security is severe, as it allows certain Oracle user accounts to execute code with root privileges.

Is there a workaround for CVE-2004-1707?

Yes, as a workaround for CVE-2004-1707, users can modify the environment to limit the access to the library files utilized by Oracle's dbsnmp and nmo programs.