CVE-2005-2293 | BDVDB-2026-11643 Detail

Description#

Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/21343
http://secunia.com/advisories/15991/
http://marc.info/?l=bugtraq&m=112129452232307&w=2
http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html
http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html

Exploit#

No public exploit known

History#

Version 12005-07-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.