EIP-2026-104024

This Metasploit module exploits a privilege escalation vulnerability in Oracle Database's DBMS_JVM_EXP_PERMS package, allowing any user with CREATE SESSION privilege to grant themselves Java IO permissions and execute arbitrary OS commands with SYSTEM privileges. It works on Oracle Database 10gR2, 11gR1, and 11gR2 (Windows only).