Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLEHOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLEHOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLEHOME environment variable.