CVE-2002-0858 Hardcoded credentials in n/a
Attackers can use default credentials for the catsnmp component to perform restricted database operations and potentially escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0858?
CVE-2002-0858 is a high-severity vulnerability in Oracle Oracle9i, published on 20 Aug 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.
Which versions are affected by CVE-2002-0858?
It affects 2 products.
Products include Oracle Oracle8i, Oracle Oracle9i.
How do I fix CVE-2002-0858?
No fix has been published for CVE-2002-0858 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0858 being exploited?
There is no known exploitation of CVE-2002-0858 in the wild and no public exploit code.
Other vulnerabilities in Oracle Oracle9i
Sources
Also known as GHSA-vmpp-4gjc-mmwf.