PT-2001-1734 · Oracle · Fndpub11I.Dll+1

Publicado 2001-08-14 · Atualizado 2017-10-10 · CVE-2001-0528

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x

Description: The issue allows local users to obtain the APPS schema password in cleartext from a debug file, potentially gaining privileges. This is due to the inclusion of a debug version of FNDPUB11I.DLL in the affected software.

Recommendations: For Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x, consider removing or restricting access to the debug version of FNDPUB11I.DLL to prevent the logging of sensitive information.

Exploit

Correção

Identificadores relacionados

CVE-2001-0528

Produtos afetados

Fndpub11I.Dll

Oracle E-Business Suite

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html · Exploit
• 🔥 http://securityfocus.com/bid/2694 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6501 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0528 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html · Aviso do Fabricante