1. CVE-Search
  2. CVE-2006-0261
ID CVE-2006-0261
Summary Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 19-10-2018 - 15:43)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 16287
bugtraq 20060117 Oracle Database 10g Rel. 2 - Event 10053 logs TDE wallet password in cleartext
cert-vn VU#545804
confirm http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
misc http://www.red-database-security.com/advisory/oracle_tde_wallet_password.html
sectrack 1015499
secunia
  • 18493
  • 18608
vupen
  • ADV-2006-0243
  • ADV-2006-0323
xf
  • oracle-january2006-update(24321)
  • oracle-masterkey-plaintext(24168)
saint via4
bid 16287
description Oracle XML Component DBMS_XMLSCHEMA.GENERATESCHEMA buffer overflow
id database_oracle_version
osvdb 22567
title oracle_xml_generateschema
type remote
Last major update 19-10-2018 - 15:43
Published 18-01-2006 - 11:03
Last modified 19-10-2018 - 15:43
Back to Top