CVE-2007-1442

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

Date published : 2007-03-13

http://www.securityfocus.com/bid/22905

http://argeniss.com/research/10MinSecAudit.zip