CVE Vulnerabilities

CVE-2005-2294

Published: Jul 18, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.

Affected Software

Name Vendor Start Version End Version
Forms Oracle 4.5 (including) 4.5 (including)
Forms Oracle 6.0 (including) 6.0 (including)
Forms Oracle 6i (including) 6i (including)
Forms Oracle 9i (including) 9i (including)

References