CVE-1999-0888

This exploit leverages a vulnerability in Oracle Intelligent Agent's dbsnmp program, which trusts the ORACLE_HOME environment variable without verification. It manipulates the environment to execute arbitrary commands as root via a crafted TCL script and creates world-writable files.

This exploit leverages a vulnerability in Oracle Intelligent Agent (dbsnmp) where the ORACLE_HOME environment variable is trusted without verification. It creates a symlink to /.rhosts and exploits the setuid root binary to create a world-writable file, enabling arbitrary command execution as root via rsh.