Description

The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant (DBCA), most accounts are disabled or their passwords are changed.

Remediation

References

CVE-2007-6260

Related Vulnerabilities

Drupal Core 7.x Multiple Security Bypass Vulnerabilities (7.0 - 7.25)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1878)

WordPress Plugin Consulting Elementor Widgets SQL Injection (1.3.0)

Contao Deserialization of Untrusted Data Vulnerability (CVE-2014-1860)

Python Other Vulnerability (CVE-2006-4980)

Severity

Medium

Classification

CVE-2007-6260

Tags

Missing Update Known Vulnerabilities