Oracle Internet Directory Default Account

2004-09-02T00:00:00
ID OSVDB:9820
Type osvdb
Reporter OSVDB
Modified 2004-09-02T00:00:00

Description

Vulnerability Description

By default, Oracle Internet Directory installs with a default password. The ODSCOMMON account has a password of ODSCOMMON which is publicly known and documented. This allows attackers to trivially access the program or system.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue. Even with administrative privileges, this account and password can not be changed.

Short Description

By default, Oracle Internet Directory installs with a default password. The ODSCOMMON account has a password of ODSCOMMON which is publicly known and documented. This allows attackers to trivially access the program or system.

References:

Vendor URL: http://www.oracle.com/ Other Advisory URL: http://www.idefense.com/application/poi/display?id=135&type=vulnerabilities Keyword: unbreakable