What’s Vulnerable › Vulnerabilities

CVE-2004-1707

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-07-30 · updated 2026-06-16

Description

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Affected products

• Oracle Application Server: 1.0.2, 1.0.2.1s, 1.0.2.2, 1.0.2.2.2, 9.0.2, 9.0.2.0.0 (+6)
• Oracle Application Server Portal: 3.0.9.8.5, 9.0.2.3, 9.0.2.3a, 9.0.2.3b
• Oracle Database Server Lite: 5.0, 5.0.1, 5.0.2
• Oracle8I: enterprise_8.0.5_.0.0, enterprise_8.0.6_.0.0, enterprise_8.0.6_.0.1, enterprise_8.1.5_.0.0, enterprise_8.1.5_.0.2, enterprise_8.1.5_.1.0 (+12)
• Oracle9I: client_9.2.0.1, client_9.2.0.2, enterprise_9.0.1, enterprise_9.0.1.4, enterprise_9.0.1.5, enterprise_9.2.0 (+26)

References

• http://marc.info/?l=bugtraq&m=109147677214087&w=2
• http://secunia.com/advisories/12205
• http://www.securityfocus.com/bid/10829
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16839
• http://marc.info/?l=bugtraq&m=109147677214087&w=2
• http://secunia.com/advisories/12205
• http://www.securityfocus.com/bid/10829
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16839

Get alerted when CVE-2004-1707 or the next vulnerability affects your stack