CVE:CVE-2004-1707
CNNVD:CNNVD-200407-099
在Unix系统平台上的Oracle 8i， Oracle 9i，和Oracle IAS 9.0.2.0.1版本的(1) dbsnmp和(2) nmo程序存在漏洞。该漏洞在提高权限操作时使用默认的路径找到并执行库文件，并允许某些Oracle用户帐户借助修改libclntsh.so.9.0版本提升根特权。
solution:Upgrade oracle application_server to a higher version than *,1.0.2,1.0.2.1s,1.0.2.2,1.0.2.2.2,9.0.2,9.0.2.0.0,9.0.2.0.1,9.0.2.1,9.0.2.2,9.0.2.3,9.0.3,9.0.3.1,and avoid the version 1.0.2,1.0.2.1s,1.0.2.2,1.0.2.2.2,9.0.2,9.0.2.0.0,9.0.2.0.1,9.0.2.1,9.0.2.2,9.0.2.3,9.0.3,9.0.3.1; Upgrade oracle application_server_portal to a higher version than 3.0.9.8.5,9.0.2.3,9.0.2.3a,9.0.2.3b,and avoid the version 3.0.9.8.5,9.0.2.3,9.0.2.3a,9.0.2.3b; Upgrade oracle database_server_lite to a higher version than 5.0,5.0.1,5.0.2,and avoid the version 5.0,5.0.1,5.0.2; Upgrade oracle oracle8i to a higher version than enterprise_8.0.5_.0.0,enterprise_8.0.6_.0.0,enterprise_8.0.6_.0.1,enterprise_8.1.5_.0.0,enterprise_8.1.5_.0.2,enterprise_8.1.5_.1.0,enterprise_8.1.6_.0.0,enterprise_8.1.6_.1.0,enterprise_8.1.7_.0.0,enterprise_8.1.7_.1.0,standard_8.0.6,standard_8.0.6_.3,standard_8.1.5,standard_8.1.6,standard_8.1.7,standard_8.1.7_.0.0,standard_8.1.7_.1,standard_8.1.7_.4,and avoid the version enterprise_8.0.5_.0.0,enterprise_8.0.6_.0.0,enterprise_8.0.6_.0.1,enterprise_8.1.5_.0.0,enterprise_8.1.5_.0.2,enterprise_8.1.5_.1.0,enterprise_8.1.6_.0.0,enterprise_8.1.6_.1.0,enterprise_8.1.7_.0.0,enterprise_8.1.7_.1.0,standard_8.0.6,standard_8.0.6_.3,standard_8.1.5,standard_8.1.6,standard_8.1.7,standard_8.1.7_.0.0,standard_8.1.7_.1,standard_8.1.7_.4; Upgrade oracle oracle9i to a higher version than client_9.2.0.1,client_9.2.0.2,enterprise_9.0.1,enterprise_9.0.1.4,enterprise_9.0.1.5,enterprise_9.2.0,enterprise_9.2.0.1,enterprise_9.2.0.2,enterprise_9.2.0.3,enterprise_9.2.0.4,personal_8.1.7,personal_9.0.1,personal_9.0.1.4,personal_9.0.1.5,personal_9.2,personal_9.2.0.1,personal_9.2.0.2,personal_9.2.0.3,personal_9.2.0.4,standard_9.0,standard_9.0.1,standard_9.0.1.2,standard_9.0.1.3,standard_9.0.1.4,standard_9.0.1.5,standard_9.0.2,standard_9.2,standard_9.2.0.1,standard_9.2.0.2,standard_9.2.0.3,standard_9.2.0.4,standard_9.2.3,and avoid the version client_9.2.0.1,client_9.2.0.2,enterprise_9.0.1,enterprise_9.0.1.4,enterprise_9.0.1.5,enterprise_9.2.0,enterprise_9.2.0.1,enterprise_9.2.0.2,enterprise_9.2.0.3,enterprise_9.2.0.4,personal_8.1.7,personal_9.0.1,personal_9.0.1.4,personal_9.0.1.5,personal_9.2,personal_9.2.0.1,personal_9.2.0.2,personal_9.2.0.3,personal_9.2.0.4,standard_9.0,standard_9.0.1,standard_9.0.1.2,standard_9.0.1.3,standard_9.0.1.4,standard_9.0.1.5,standard_9.0.2,standard_9.2,standard_9.2.0.1,standard_9.2.0.2,standard_9.2.0.3,standard_9.2.0.4,standard_9.2.3