PT-2001-1734 · Oracle · Fndpub11I.Dll+1

Published 2001-08-14 · Updated 2017-10-10 · CVE-2001-0528

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x

Description: The issue allows local users to obtain the APPS schema password in cleartext from a debug file, potentially gaining privileges. This is due to the inclusion of a debug version of FNDPUB11I.DLL in the affected software.

Recommendations: For Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x, consider removing or restricting access to the debug version of FNDPUB11I.DLL to prevent the logging of sensitive information.

Exploit

Fix

Related Identifiers

CVE-2001-0528

Affected Products

Fndpub11I.Dll

Oracle E-Business Suite

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html · Exploit
• 🔥 http://securityfocus.com/bid/2694 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0528 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6501 · Note