CVE-2001-0832

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-12-06 · updated 2026-06-16

Description

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."

Affected products

Oracle Database: through 9.0.1; 8.0, 8.1

References

http://marc.info/?l=bugtraq&m=100386756715645&w=2
http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf
http://marc.info/?l=bugtraq&m=100386756715645&w=2
http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf

Get alerted when CVE-2001-0832 or the next vulnerability affects your stack