Vulnerability Name:

CVE-2004-1707 (CCN-16839)

Assigned:2004-07-30
Published:2004-07-30
Updated:2017-07-11
Summary:The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Privileges
References:Source: CCN
Type: Full-Disclosure Mailing List, Fri Jul 30 2004 - 04:28:39 CDT
OPEN3S - Local Privilege Elevation through Oracle products (Unix Platform)

Source: MITRE
Type: CNA
CVE-2004-1707

Source: BUGTRAQ
Type: UNKNOWN
20040802 OPEN3S - Local Privilege Elevation through Oracle products (Unix Platform)

Source: CCN
Type: SA12205
Oracle9i Application Server Privilege Escalation Issue

Source: SECUNIA
Type: Exploit, Patch, Vendor Advisory
12205

Source: CCN
Type: OSVDB ID: 8286
Oracle Application and Database Server Local Library Privilege Escalation

Source: BID
Type: Vendor Advisory
10829

Source: CCN
Type: BID-10829
Oracle Database Default Library Directory Privilege Escalation Vulnerability

Source: XF
Type: UNKNOWN
oracle-libraries-gain-privileges(16839)

Source: XF
Type: UNKNOWN
oracle-libraries-gain-privileges(16839)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:oracle:application_server:*:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:3.0.9.8.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:9.0.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:9.0.2.3a:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:9.0.2.3b:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:oracle9i:standard_9.2.3:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:oracle:database_server:8.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:8.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:8.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:8.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:8.0.6.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.0.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:3.0.9.8.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:9.0.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:9.0.2.3a:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:application_server_portal:9.0.2.3b:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:8.1.7.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.0.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.0.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.2.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.2.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0.1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0.2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server_lite:5.0.2.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.2.0.1:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    oracle application server *
    oracle application server 1.0.2
    oracle application server 1.0.2.1s
    oracle application server 1.0.2.2
    oracle application server 1.0.2.2.2
    oracle application server 9.0.2
    oracle application server 9.0.2.0.0
    oracle application server 9.0.2.0.1
    oracle application server 9.0.2.1
    oracle application server 9.0.2.2
    oracle application server 9.0.2.3
    oracle application server 9.0.3
    oracle application server 9.0.3.1
    oracle application server portal 3.0.9.8.5
    oracle application server portal 9.0.2.3
    oracle application server portal 9.0.2.3a
    oracle application server portal 9.0.2.3b
    oracle database server lite 5.0
    oracle database server lite 5.0.1
    oracle database server lite 5.0.2
    oracle oracle8i enterprise_8.0.5_.0.0
    oracle oracle8i enterprise_8.0.6_.0.0
    oracle oracle8i enterprise_8.0.6_.0.1
    oracle oracle8i enterprise_8.1.5_.0.0
    oracle oracle8i enterprise_8.1.5_.0.2
    oracle oracle8i enterprise_8.1.5_.1.0
    oracle oracle8i enterprise_8.1.6_.0.0
    oracle oracle8i enterprise_8.1.6_.1.0
    oracle oracle8i enterprise_8.1.7_.0.0
    oracle oracle8i enterprise_8.1.7_.1.0
    oracle oracle8i standard_8.0.6
    oracle oracle8i standard_8.0.6_.3
    oracle oracle8i standard_8.1.5
    oracle oracle8i standard_8.1.6
    oracle oracle8i standard_8.1.7
    oracle oracle8i standard_8.1.7_.0.0
    oracle oracle8i standard_8.1.7_.1
    oracle oracle8i standard_8.1.7_.4
    oracle oracle9i client_9.2.0.1
    oracle oracle9i client_9.2.0.2
    oracle oracle9i enterprise_9.0.1
    oracle oracle9i enterprise_9.0.1.4
    oracle oracle9i enterprise_9.0.1.5
    oracle oracle9i enterprise_9.2.0
    oracle oracle9i enterprise_9.2.0.1
    oracle oracle9i enterprise_9.2.0.2
    oracle oracle9i enterprise_9.2.0.3
    oracle oracle9i enterprise_9.2.0.4
    oracle oracle9i personal_8.1.7
    oracle oracle9i personal_9.0.1
    oracle oracle9i personal_9.0.1.4
    oracle oracle9i personal_9.0.1.5
    oracle oracle9i personal_9.2
    oracle oracle9i personal_9.2.0.1
    oracle oracle9i personal_9.2.0.2
    oracle oracle9i personal_9.2.0.3
    oracle oracle9i personal_9.2.0.4
    oracle oracle9i standard_9.0
    oracle oracle9i standard_9.0.1
    oracle oracle9i standard_9.0.1.2
    oracle oracle9i standard_9.0.1.3
    oracle oracle9i standard_9.0.1.4
    oracle oracle9i standard_9.0.1.5
    oracle oracle9i standard_9.0.2
    oracle oracle9i standard_9.2
    oracle oracle9i standard_9.2.0.1
    oracle oracle9i standard_9.2.0.2
    oracle oracle9i standard_9.2.0.3
    oracle oracle9i standard_9.2.0.4
    oracle oracle9i standard_9.2.3
    oracle database server 8.1.5
    oracle database server 8.1.6
    oracle database server 8.1.7
    oracle database server 8.0.6
    oracle database server 9.0.1
    oracle database server 9.0
    oracle application server 9.0.2
    oracle application server 9.0.2.0.0
    oracle application server 9.0.3
    oracle application server 1.0.2.2
    oracle application server 1.0.2.1s
    oracle database server 8.1.7.4
    oracle database server 8.0.6.3
    oracle application server 9.0.2.1
    oracle application server 9.0.2.2
    oracle application server 9.0.2.3
    oracle application server 9.0.3.1
    oracle application server 1.0.2
    oracle database server 9.0.2.4
    oracle application server 1.0.2.2.2
    oracle application server 9.0.2.0.1
    oracle application server portal 3.0.9.8.5
    oracle application server portal 9.0.2.3
    oracle application server portal 9.0.2.3a
    oracle application server portal 9.0.2.3b
    oracle database server 8.1.7.0.0
    oracle database server 9.0.1.4
    oracle database server 9.0.1.5
    oracle database server 9.0.2.4
    oracle database server 9.2
    oracle database server 9.2.0.1
    oracle database server 9.2.0.3
    oracle database server 9.2.2
    oracle database server lite 5.0
    oracle database server lite 5.0.1.0.0
    oracle database server lite 5.0.2.0.0
    oracle database server lite 5.0.2.9.0
    oracle database server 9.2.0.1