PT-2005-3221 · Oracle · Oracle Forms

Alexander Kornbrust · Published 2005-07-17 · Updated 2024-02-08 · CVE-2005-2293

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Oracle Forms versions 9.0.4

Description: The issue allows local users to obtain sensitive database information because database usernames and passwords are stored in a temporary file that is not properly deleted after use.

Recommendations: For Oracle Forms version 9.0.4, consider implementing a secure method to handle temporary files, such as immediately deleting them after use, to prevent unauthorized access to sensitive database credentials.

Exploit

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2005-2293

Affected Products

Oracle Forms

References · 6

• 🔥 http://marc.info/?l=bugtraq&m=112129452232307&w=2 · Exploit
• 🔥 http://red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2293 · Security Note
• http://oracle.com/technology/deploy/security/pdf/cpujul2005.html · Vendor Advisory
• http://secunia.com/advisories/15991 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21343 · Note