CVE-2001-0832: Oracle Database Server

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."

Affected products

• Oracle Database Server: up to and including 9.0.1; version 8.0 only; version 8.1 only

Published 2001-12-06. Last modified 2026-06-16.