CVE

Id
9795  
CVE No.
CVE-2004-1367  
Status
Candidate  
Description
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.  
Phase
Assigned (20050107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66715 9795 CVE-2004-1367 BUGTRAQ:20041223 Oracle clear text passwords (#NISR2122004D)  View
66716 9795 CVE-2004-1367 URL:http://marc.info/?l=bugtraq&m=110382247308064&w=2  View
66717 9795 CVE-2004-1367 MISC:http://www.ngssoftware.com/advisories/oracle23122004D.txt  View
66718 9795 CVE-2004-1367 CONFIRM:http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf  View
66719 9795 CVE-2004-1367 SUNALERT:101782  View
66720 9795 CVE-2004-1367 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1  View
66721 9795 CVE-2004-1367 CERT:TA04-245A  View
66722 9795 CVE-2004-1367 URL:http://www.us-cert.gov/cas/techalerts/TA04-245A.html  View
66723 9795 CVE-2004-1367 CERT-VN:VU#316206  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63017 JVNDB-2004-000359 Oracle 製品の ISQL*Plus における任意のファイルを実行される脆弱性 ------------ CVE-2004-1368 9795 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000359.html  View