OSVDB ID: 33979

Title: Oracle SetSecurityDescriptorDacl Function NULL pDacl Parameter Local Privilege Escalation

Info

Disclosure

Feb 07, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

CVE ID: 2007-1442 (see also: NVD)
Bugtraq ID: 22905
Secunia Advisory ID: 24475 24929 24969 26669
Other Advisory URL: http://argeniss.com/research/10MinSecAudit.zip
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00727143
http://www-1.ibm.com/support/docview.wss?uid=swg21268889
News Article: http://news.com.com/Oracle+patches+to+fix+37+flaws/2100-1002_3-6175041.html
Vendor Specific Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html
Keyword: PROCESS_DUP_HANDLE

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/33979