CVE-2006-0261 Information disclosure in n/a
Attackers can read plaintext TDE wallet passwords from trace files in Oracle Database, exposing sensitive encryption keys.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2006-0261?
CVE-2006-0261 is a critical vulnerability in Oracle Database Server, published on 18 Jan 2006.
Official description
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053.
Which versions are affected by CVE-2006-0261?
It affects 1 product.
Products include Oracle Database Server.
How do I fix CVE-2006-0261?
No fix has been published for CVE-2006-0261 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-0261 being exploited?
There is no known exploitation of CVE-2006-0261 in the wild and no public exploit code.
Other vulnerabilities in Oracle Database Server
Sources
Also known as GHSA-9f47-75v5-f4cr.