RE: vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6

["Ron Cohen" <sec () rony clara net>]

Looking again at the log you provided, it is not clear to me how
you was able to create the trc file in the log directory.
the permission on that directory is 775, pask:pask. the trc file
created with the owner:group of oracle:pask. does user pask
belong to the dba group?
also, there is an option in the ora.ini file to set a specific
area for the trc files. i have seen this option with 8.1.x,
i'm not sure about 8.0.x.

        _rony

-----Original Message-----
From: pask () plazasite com [mailto:pask () plazasite com]
Sent: 02 August 2001 08:57
To: bugtraq () securityfocus com; oracle-l () faticity com
Subject: vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6





                      WWW.PLAZASITE.COM

                  System & Security Division





   Title:     Vulnerability in oracle binary in Oracle 8.0.5

    Date:     11-12-2000


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.265 / Virus Database: 137 - Release Date: 18/07/2001