Lucene search

[email protected]CVE-2004-2134

HistoryJan 28, 2004 - 5:00 a.m.

CVE-2004-2134

2004-01-2805:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

oracle

toplink

mapping

workbench

weak encryption

passwords

cve-2004-2134

nvd

6.2 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.6%

JSON

Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.

CPENameOperatorVersion
oracle:application_serveroracle application servereq9.0.2.1
oracle:application_serveroracle application servereq9.0.2.0.0
oracle:application_serveroracle application servereq9.0.2.3
oracle:application_serveroracle application servereq9.0.2.0.1
oracle:application_serveroracle application servereq9.0.2.2
oracle:application_serveroracle application servereq9.0.2
oracle:application_serveroracle application servereq9.0.3

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	9.0.2.1
oracle:application_server	oracle application server	eq	9.0.2.0.0
oracle:application_server	oracle application server	eq	9.0.2.3
oracle:application_server	oracle application server	eq	9.0.2.0.1
oracle:application_server	oracle application server	eq	9.0.2.2
oracle:application_server	oracle application server	eq	9.0.2
oracle:application_server	oracle application server	eq	9.0.3

References

marc.info/?l=bugtraq&m=107531028325112&w=2

www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5

www.securityfocus.com/archive/1/352315/30/21430/threaded

www.securityfocus.com/archive/82/351719

www.securityfocus.com/bid/9515

6.2 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.6%

JSON

Related for CVE-2004-2134

nessus1