CVE-2007-4393 The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.
MediumCVSS 4.6
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | All versions | No fix listed |
References
- 46403 vdb-entry
- 26395 third-party-advisory vendor-advisory
- SUSE-SR:2007:016 vendor-advisory