CVE-2005-3203 The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
MediumCVSS 4.6
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle html db | = 1.3 | No fix listed |
| oracle html db | = 1.3.6 | No fix listed |
References
- 20051007 Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB mailing-list
- 20051007 Plaintext Password Vulnerabilitiy during Installation of Oracle mailing-list
- 14935 third-party-advisory vendor-advisory
- www.red-database-security.com vendor-advisory
- 15033 vdb-entry
- oracle-htmldb-install-plaintext-password(22542) vdb-entry