CVE-2004-1366

Exploit

EPSS 0.3%
Published 04.08.2004 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Application Server

Oracle ≫ Application Server Version9.0.2

Oracle ≫ Application Server Version9.0.2.0.0

Oracle ≫ Application Server Version9.0.2.0.1

Oracle ≫ Application Server Version9.0.2.1

Oracle ≫ Application Server Version9.0.2.2

Oracle ≫ Application Server Version9.0.2.3

Oracle ≫ Application Server Version9.0.3

Oracle ≫ Application Server Version9.0.3.1

Oracle ≫ Application Server Version9.0.4

Oracle ≫ Application Server Version9.0.4.0

Oracle ≫ Application Server Version9.0.4.1

Oracle ≫ Collaboration Suite Versionrelease_1

Oracle ≫ E-business Suite Version11.5.1

Oracle ≫ E-business Suite Version11.5.2

Oracle ≫ E-business Suite Version11.5.3

Oracle ≫ E-business Suite Version11.5.4

Oracle ≫ E-business Suite Version11.5.5

Oracle ≫ E-business Suite Version11.5.6

Oracle ≫ E-business Suite Version11.5.7

Oracle ≫ E-business Suite Version11.5.8

Oracle ≫ E-business Suite Version11.5.9

Oracle ≫ Enterprise Manager Version9

Oracle ≫ Enterprise Manager Version9.0.1

Oracle ≫ Enterprise Manager Database Control Version10.1.2

Oracle ≫ Enterprise Manager Grid Control Version10.1.0.2

Oracle ≫ Oracle10g Versionenterprise_9.0.4_.0

Oracle ≫ Oracle10g Versionenterprise_10.1.0.2

Oracle ≫ Oracle10g Versionpersonal_9.0.4_.0

Oracle ≫ Oracle10g Versionpersonal_10.1_.0.2

Oracle ≫ Oracle10g Versionstandard_9.0.4_.0

Oracle ≫ Oracle10g Versionstandard_10.1_.0.2

Oracle ≫ Oracle8i Versionenterprise_8.0.5_.0.0

Oracle ≫ Oracle8i Versionenterprise_8.0.6_.0.0

Oracle ≫ Oracle8i Versionenterprise_8.0.6_.0.1

Oracle ≫ Oracle8i Versionenterprise_8.1.5_.0.0

Oracle ≫ Oracle8i Versionenterprise_8.1.5_.0.2

Oracle ≫ Oracle8i Versionenterprise_8.1.5_.1.0

Oracle ≫ Oracle8i Versionenterprise_8.1.6_.0.0

Oracle ≫ Oracle8i Versionenterprise_8.1.6_.1.0

Oracle ≫ Oracle8i Versionenterprise_8.1.7_.0.0

Oracle ≫ Oracle8i Versionenterprise_8.1.7_.1.0

Oracle ≫ Oracle8i Versionenterprise_8.1.7_.4

Oracle ≫ Oracle8i Versionstandard_8.0.6

Oracle ≫ Oracle8i Versionstandard_8.0.6_.3

Oracle ≫ Oracle8i Versionstandard_8.1.5

Oracle ≫ Oracle8i Versionstandard_8.1.6

Oracle ≫ Oracle8i Versionstandard_8.1.7

Oracle ≫ Oracle8i Versionstandard_8.1.7_.0.0

Oracle ≫ Oracle8i Versionstandard_8.1.7_.1

Oracle ≫ Oracle8i Versionstandard_8.1.7_.4

Oracle ≫ Oracle9i Versionclient_9.2.0.1

Oracle ≫ Oracle9i Versionclient_9.2.0.2

Oracle ≫ Oracle9i Versionenterprise_8.1.7

Oracle ≫ Oracle9i Versionenterprise_9.0.1

Oracle ≫ Oracle9i Versionenterprise_9.0.1.4

Oracle ≫ Oracle9i Versionenterprise_9.0.1.5

Oracle ≫ Oracle9i Versionenterprise_9.2.0

Oracle ≫ Oracle9i Versionenterprise_9.2.0.1

Oracle ≫ Oracle9i Versionenterprise_9.2.0.2

Oracle ≫ Oracle9i Versionenterprise_9.2.0.3

Oracle ≫ Oracle9i Versionenterprise_9.2.0.4

Oracle ≫ Oracle9i Versionenterprise_9.2.0.5

Oracle ≫ Oracle9i Versionpersonal_8.1.7

Oracle ≫ Oracle9i Versionpersonal_9.0.1

Oracle ≫ Oracle9i Versionpersonal_9.0.1.4

Oracle ≫ Oracle9i Versionpersonal_9.0.1.5

Oracle ≫ Oracle9i Versionpersonal_9.2

Oracle ≫ Oracle9i Versionpersonal_9.2.0.1

Oracle ≫ Oracle9i Versionpersonal_9.2.0.2

Oracle ≫ Oracle9i Versionpersonal_9.2.0.3

Oracle ≫ Oracle9i Versionpersonal_9.2.0.4

Oracle ≫ Oracle9i Versionpersonal_9.2.0.5

Oracle ≫ Oracle9i Versionstandard_8.1.7

Oracle ≫ Oracle9i Versionstandard_9.0

Oracle ≫ Oracle9i Versionstandard_9.0.1

Oracle ≫ Oracle9i Versionstandard_9.0.1.2

Oracle ≫ Oracle9i Versionstandard_9.0.1.3

Oracle ≫ Oracle9i Versionstandard_9.0.1.4

Oracle ≫ Oracle9i Versionstandard_9.0.1.5

Oracle ≫ Oracle9i Versionstandard_9.0.2

Oracle ≫ Oracle9i Versionstandard_9.2

Oracle ≫ Oracle9i Versionstandard_9.2.0.1

Oracle ≫ Oracle9i Versionstandard_9.2.0.2

Oracle ≫ Oracle9i Versionstandard_9.2.0.3

Oracle ≫ Oracle9i Versionstandard_9.2.0.4

Oracle ≫ Oracle9i Versionstandard_9.2.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.3%	0.498

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1

http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf

Patch

Vendor Advisory

http://www.securityfocus.com/bid/10871

Patch

http://www.us-cert.gov/cas/techalerts/TA04-245A.html

Patch

Third Party Advisory

US Government Resource

http://www.kb.cert.org/vuls/id/316206

US Government Resource

http://www.ngssoftware.com/advisories/oracle23122004D.txt

Patch

Vendor Advisory

http://www.securityfocus.com/archive/1/385323

Patch

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/18661

https://nvd.nist.gov/vuln/detail/CVE-2004-1366

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1366

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1366

EUVD