CVE-2001-0942: Oracle Database Server

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.

Affected products

• Oracle Database Server: version 8.1.6 only; version 8.1.7 only

Published 2001-11-29. Last modified 2026-06-16.