OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1999: Re: *Huge* security hole in Oracle 8.0.5 with Intellegent agent i

Re: *Huge* security hole in Oracle 8.0.5 with Intellegent agent i

Peter.FredrikssonSkriptor.com ("Peter.FredrikssonSkriptor.com")
Wed, 5 May 1999 14:04:38 +0200 

	-----Original Message-----
	From:	Anthony Clarke [SMTP:Anthony.Clarkeone2one.co.uk]
	Sent:	Friday, April 30, 1999 3:12 PM
	To:	BUGTRAQnetspace.org
	Subject:	*Huge* security hole in Oracle 8.0.5 with
Intellegent agent installedoracle-digested

	This hole has been verified on both Linux and Solaris with Oracle
8.0.5. It
	probably exists in all Unix versions of 8.0.5. Whether it exists in
later
	versions is unknown. (I don't believe it exists in 8.0.4, but I
can't
	verify that at the moment) I also don't know if it affects non-Unix
	versions of 8.0.5.

And is now verified on AIX.

Oracle 8i 8.0.5 on AIX 4.3.1.0 running on a RS/6000 F50:

-rwsr-xr-x   1 root     dba       6849934 Jul 13  1998 oratclsh

My best regards,
Peter Fredriksson
Systems administrator
Skriptor AB
email - Peter.FredrikssonSkriptor.com