CVE

Id
16374  
CVE No.
CVE-2006-0270  
Status
Candidate  
Description
Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
130515 16374 CVE-2006-0270 BUGTRAQ:20060117 Oracle Database 10g Rel. 2- Transparent Data Encryption plaintext masterkey in SGA  View
130516 16374 CVE-2006-0270 URL:http://www.securityfocus.com/archive/1/archive/1/422262/30/7400/threaded  View
130517 16374 CVE-2006-0270 MISC:http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html  View
130518 16374 CVE-2006-0270 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html  View
130519 16374 CVE-2006-0270 CERT-VN:VU#545804  View
130520 16374 CVE-2006-0270 URL:http://www.kb.cert.org/vuls/id/545804  View
130521 16374 CVE-2006-0270 BID:16287  View
130522 16374 CVE-2006-0270 URL:http://www.securityfocus.com/bid/16287  View
130523 16374 CVE-2006-0270 VUPEN:ADV-2006-0243  View
130524 16374 CVE-2006-0270 URL:http://www.vupen.com/english/advisories/2006/0243  View
130525 16374 CVE-2006-0270 VUPEN:ADV-2006-0323  View
130526 16374 CVE-2006-0270 URL:http://www.vupen.com/english/advisories/2006/0323  View
130527 16374 CVE-2006-0270 SECTRACK:1015499  View
130528 16374 CVE-2006-0270 URL:http://securitytracker.com/id?1015499  View
130529 16374 CVE-2006-0270 SECUNIA:18493  View
130530 16374 CVE-2006-0270 URL:http://secunia.com/advisories/18493  View
130531 16374 CVE-2006-0270 SECUNIA:18608  View
130532 16374 CVE-2006-0270 URL:http://secunia.com/advisories/18608  View
130533 16374 CVE-2006-0270 XF:oracle-january2006-update(24321)  View
130534 16374 CVE-2006-0270 URL:http://xforce.iss.net/xforce/xfdb/24321  View
130535 16374 CVE-2006-0270 XF:oracle-sga-masterkey-plaintext(24186)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57846 JVNDB-2006-000042 Oracle Database の XML Database コンポーネントにおける脆弱性 (DB29) ------------ CVE-2006-0272 16374 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000042.html  View