The Oracle July 2008 Critical Patch Update fixes a vulnerability which allows a user in the OINSTALL/DBA group to scalate privileges to root.

http://www.securiteam.com/unixfocus/5IP0Q15OUY.html