Unscored CVE-2007-1442 EUVD-2007-1436GHSA-7w8h-97qm-v5g3

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control …

Published Mar 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

References

24475 third-party-advisory
22905 vdb-entry
33979 vdb-entry
http://argeniss.com/research/10MinSecAudit.zip