 variable. In
                    this scenario, if the uid used by the application has
                    sufficiently broad privileges, then the application's caller
                    can read and/or write databases owned by another user
                    simply by setting his
                    <code class="literal">DB_HOME</code> environment variable to the
                    environment used by that other user.
                </p>
                <p>
                    Note that this scenario 