10

CVE-2006-0270

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27.  NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Database Server Version10.2.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.86% 0.91
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/18493
Vendor Advisory
http://secunia.com/advisories/18608
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.vupen.com/english/advisories/2006/0323
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
http://securitytracker.com/id?1015499
http://www.kb.cert.org/vuls/id/545804
US Government Resource
http://www.securityfocus.com/bid/16287
http://www.vupen.com/english/advisories/2006/0243
Vendor Advisory
http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html
http://www.securityfocus.com/archive/1/422262/30/7400/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/24186