Oracle Database O5Logon Protocol Information Disclosure (CVE-2012-3137)

An information disclosure vulnerability has been discovered in the Oracle authentication protocol O5Logon. The vulnerability is due to an error in the authentication protocol. A remote attacker can exploit this vulnerability by sending a specially crafted Connect request to an Oracle Database...