CVE-2007-1442

Publication date

2007-03-14 00:00:00

Family

mitre

State

PUBLISHED

Description

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.