CVE-2004-1366

Published: Aug 4, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.

Affected (87)

Products: Oracle: Application Server, Collaboration Suite, E Business Suite, Enterprise Manager, Enterprise Manager Database Control, Enterprise Manager Grid Control, Oracle10g, Oracle8i, Oracle9i

9 products

Enterprise Manager Database Control

Enterprise Manager Grid Control

Oracle10g

Oracle8i

Oracle9i

Configuration A

87 vulnerable

Vulnerable Software	Affected Versions
Oracle Application Server	All versions
Oracle Application Server	Version 9.0.2.0.0
Oracle Application Server	Version 9.0.2.0.1
Oracle Application Server	Version 9.0.2.1
Oracle Application Server	Version 9.0.2.2
Oracle Application Server	Version 9.0.2.3
Oracle Application Server	Version 9.0.2
Oracle Application Server	Version 9.0.3.1
Oracle Application Server	Version 9.0.3
Oracle Application Server	Version 9.0.4.0
Oracle Application Server	Version 9.0.4.1
Oracle Application Server	Version 9.0.4
Oracle Collaboration Suite	Version release_1
Oracle E Business Suite	Version 11.5.1
Oracle E Business Suite	Version 11.5.2
Oracle E Business Suite	Version 11.5.3
Oracle E Business Suite	Version 11.5.4
Oracle E Business Suite	Version 11.5.5
Oracle E Business Suite	Version 11.5.6
Oracle E Business Suite	Version 11.5.7
Oracle E Business Suite	Version 11.5.8
Oracle E Business Suite	Version 11.5.9
Oracle Enterprise Manager	Version 9.0.1
Oracle Enterprise Manager	Version 9
Oracle Enterprise Manager Database Control	Version 10.1.2
Oracle Enterprise Manager Grid Control	Version 10.1.0.2
Oracle Oracle10g	Version enterprise_10.1.0.2
Oracle Oracle10g	Version enterprise_9.0.4_.0
Oracle Oracle10g	Version personal_10.1_.0.2
Oracle Oracle10g	Version personal_9.0.4_.0
Oracle Oracle10g	Version standard_10.1_.0.2
Oracle Oracle10g	Version standard_9.0.4_.0
Oracle Oracle8i	Version enterprise_8.0.5_.0.0
Oracle Oracle8i	Version enterprise_8.0.6_.0.0
Oracle Oracle8i	Version enterprise_8.0.6_.0.1
Oracle Oracle8i	Version enterprise_8.1.5_.0.0
Oracle Oracle8i	Version enterprise_8.1.5_.0.2
Oracle Oracle8i	Version enterprise_8.1.5_.1.0
Oracle Oracle8i	Version enterprise_8.1.6_.0.0
Oracle Oracle8i	Version enterprise_8.1.6_.1.0
Oracle Oracle8i	Version enterprise_8.1.7_.0.0
Oracle Oracle8i	Version enterprise_8.1.7_.1.0
Oracle Oracle8i	Version enterprise_8.1.7_.4
Oracle Oracle8i	Version standard_8.0.6
Oracle Oracle8i	Version standard_8.0.6_.3
Oracle Oracle8i	Version standard_8.1.5
Oracle Oracle8i	Version standard_8.1.6
Oracle Oracle8i	Version standard_8.1.7
Oracle Oracle8i	Version standard_8.1.7_.0.0
Oracle Oracle8i	Version standard_8.1.7_.1
Oracle Oracle8i	Version standard_8.1.7_.4
Oracle Oracle9i	Version client_9.2.0.1
Oracle Oracle9i	Version client_9.2.0.2
Oracle Oracle9i	Version enterprise_8.1.7
Oracle Oracle9i	Version enterprise_9.0.1.4
Oracle Oracle9i	Version enterprise_9.0.1.5
Oracle Oracle9i	Version enterprise_9.0.1
Oracle Oracle9i	Version enterprise_9.2.0.1
Oracle Oracle9i	Version enterprise_9.2.0.2
Oracle Oracle9i	Version enterprise_9.2.0.3
Oracle Oracle9i	Version enterprise_9.2.0.4
Oracle Oracle9i	Version enterprise_9.2.0.5
Oracle Oracle9i	Version enterprise_9.2.0
Oracle Oracle9i	Version personal_8.1.7
Oracle Oracle9i	Version personal_9.0.1.4
Oracle Oracle9i	Version personal_9.0.1.5
Oracle Oracle9i	Version personal_9.0.1
Oracle Oracle9i	Version personal_9.2.0.1
Oracle Oracle9i	Version personal_9.2.0.2
Oracle Oracle9i	Version personal_9.2.0.3
Oracle Oracle9i	Version personal_9.2.0.4
Oracle Oracle9i	Version personal_9.2.0.5
Oracle Oracle9i	Version personal_9.2
Oracle Oracle9i	Version standard_8.1.7
Oracle Oracle9i	Version standard_9.0.1.2
Oracle Oracle9i	Version standard_9.0.1.3
Oracle Oracle9i	Version standard_9.0.1.4
Oracle Oracle9i	Version standard_9.0.1.5
Oracle Oracle9i	Version standard_9.0.1
Oracle Oracle9i	Version standard_9.0.2
Oracle Oracle9i	Version standard_9.0
Oracle Oracle9i	Version standard_9.2.0.1
Oracle Oracle9i	Version standard_9.2.0.2
Oracle Oracle9i	Version standard_9.2.0.3
Oracle Oracle9i	Version standard_9.2.0.4
Oracle Oracle9i	Version standard_9.2.0.5
Oracle Oracle9i	Version standard_9.2