Read the docs
TI-1999-00661 Aliases CVE-1999-0711GHSA-4pfh-v638-25xp

The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.

Priority LOW 24Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.

Why it matters now

EPSS 0.01203 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:oracle:oracle8i:8.0.3:*:*:*:*:*:*:*8.0.3VulnerableOracle
cpe:2.3:a:oracle:oracle8i:8.0.4:*:*:*:*:*:*:*8.0.4VulnerableOracle
cpe:2.3:a:oracle:oracle8i:8.0.5:*:*:*:*:*:*:*8.0.5VulnerableOracle
cpe:2.3:a:oracle:oracle8i:8.0.5.1:*:*:*:*:*:*:*8.0.5.1VulnerableOracle
cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*8.1.5VulnerableOracle
  • cpe:2.3:a:oracle:oracle8i:8.0.3:*:*:*:*:*:*:* Versions 8.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:oracle8i:8.0.4:*:*:*:*:*:*:* Versions 8.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:oracle8i:8.0.5:*:*:*:*:*:*:* Versions 8.0.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:oracle8i:8.0.5.1:*:*:*:*:*:*:* Versions 8.0.5.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:* Versions 8.1.5 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-1999-0711
  2. 2026-10-03 Alias added: GHSA-4pfh-v638-25xp

References

Other 2

  • TI-2001-00491 Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and… CVSS 2.0HIGH 10.0
  • TI-2002-00816 Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before… CVSS 2.0MEDIUM 6.8
  • TI-2003-00090 Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows… CVSS 2.0HIGH 10.0
  • TI-2003-00091 Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and… CVSS 2.0HIGH 9.0
  • TI-2002-00547 The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous… CVSS 2.0MEDIUM 5.0
  • TI-2004-01248 Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute… CVSS 2.0HIGH 9.0
See all 45 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences