NVD

Id
71746  
Name
CVE-2004-1367  
Description
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-08-04  
Modified Date
2016-10-17  
Seq
2004-1367  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370990 71746 CVE-2004-1367 20041223 Oracle clear text passwords (#NISR2122004D)  View
370991 71746 CVE-2004-1367 101782  View
370992 71746 CVE-2004-1367 VU#316206  View
370993 71746 CVE-2004-1367 http://www.ngssoftware.com/advisories/oracle23122004D.txt  View
370994 71746 CVE-2004-1367 http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf  View
370995 71746 CVE-2004-1367 TA04-245A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63016 JVNDB-2004-000358 Oracle Database Server のログファイルにおけるパスワードを取得される脆弱性 ------------ CVE-2004-1367 9794 CVE-2004-1367 71746 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000358.html 2004-08-31 2007-04-01 View