CVE-2005-2294 Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local u...
LowCVSS 2.1
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle forms | = 4.5 | No fix listed |
| oracle forms | = 6.0 | No fix listed |
| oracle forms | = 6i | No fix listed |
| oracle forms | = 9i | No fix listed |
References
- 20050713 Advisory: Oracle Forms Insecure Temporary File Handling mailing-list
- 15991 patch third-party-advisory vendor-advisory
- www.oracle.com patch vendor-advisory
- www.red-database-security.com patch vendor-advisory
- formsbuilder-temp-file-info-disclosure(21347) vdb-entry