PT-2005-3221 · Oracle · Oracle Forms

Alexander Kornbrust · Publicado 2005-07-17 · Atualizado 2024-02-08 · CVE-2005-2293

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Oracle Forms versions 9.0.4

Description: The issue allows local users to obtain sensitive database information because database usernames and passwords are stored in a temporary file that is not properly deleted after use.

Recommendations: For Oracle Forms version 9.0.4, consider implementing a secure method to handle temporary files, such as immediately deleting them after use, to prevent unauthorized access to sensitive database credentials.

Exploit

Correção

Enumeração de Fraquezas

CWE-459

Identificadores relacionados

CVE-2005-2293

Produtos afetados

Oracle Forms

Referências · 6

• 🔥 http://marc.info/?l=bugtraq&m=112129452232307&w=2 · Exploit
• 🔥 http://red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21343 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2293 · Nota de Segurança
• http://oracle.com/technology/deploy/security/pdf/cpujul2005.html · Aviso do Fabricante
• http://secunia.com/advisories/15991 · Aviso do Fabricante