VDB
CVE-2001-0300
CVE-2001-0300
PUBLISHED
CVSS 2.0999999046325684 LOW
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.
EPSS 0.59% · 69.7th percentile
Risk Scores
CVSS 2.0
2.0999999046325684
EPSS Score
0.59%
69.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| oracle | internet_directory | 2.1.1.1 |
Timeline
- Apr 4, 2001 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Apr 30, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
References
- 20001222 vulnerability #2 in Oracle Internet Directory 2.1.1.1 in Oracle 8.1.7 mailing-list
- oracle-oidldap-write-permission(5804) vdb
- VU#610904 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2001-0300 advisory