Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0888. PoCs published by Gilles PARC, Brock Tellier.
AI-analyzed exploit summary This exploit leverages a vulnerability in Oracle Intelligent Agent's dbsnmp program, which trusts the ORACLE_HOME environment variable without verification. It manipulates the environment to execute arbitrary commands as root via a crafted TCL script and creates world-writable files.
Description
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Exploits (2)
This exploit leverages a vulnerability in Oracle Intelligent Agent's dbsnmp program, which trusts the ORACLE_HOME environment variable without verification. It manipulates the environment to execute arbitrary commands as root via a crafted TCL script and creates world-writable files.
This exploit leverages a vulnerability in Oracle Intelligent Agent (dbsnmp) where the ORACLE_HOME environment variable is trusted without verification. It creates a symlink to /.rhosts and exploits the setuid root binary to create a world-writable file, enabling arbitrary command execution as root via rsh.