[
From SecurityFocus]
Oracle database implementations are reportedly prone to a default library directory privilege escalation vulnerability. This issue arises due to a default configuration error that will permit the attacker to replace libraries required by setuid root applications with arbitrary code.
The article continues at
http://www.securityfocus.com/bid/10829/discussion/