medium4.6Public exploit code
CVE-2004-2134
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm2004-01-28 · local · multiple · Verified
Impact
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Application Server | Versions 9.0.2, 9.0.2.0.0, 9.0.2.0.1, 9.0.2.1, 9.0.2.2, 9.0.2.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107531028325112&w=2
- http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5
- http://www.securityfocus.com/archive/1/352315/30/21430/threaded
- http://www.securityfocus.com/archive/82/351719
- http://www.securityfocus.com/bid/9515
- http://marc.info/?l=bugtraq&m=107531028325112&w=2
- http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5
- http://www.securityfocus.com/archive/1/352315/30/21430/threaded
- http://www.securityfocus.com/archive/82/351719
- http://www.securityfocus.com/bid/9515