« Volver al listado

CVE-2005-2294

Estado: ModificadaBaja (2.1)—

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Oracle — Forms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-2294",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-07-18T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=112129398711846&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/15991/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.red-database-security.com/advisory/oracle_forms_unsecure_temp_file_handling.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21347",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=112129398711846&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/15991/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.red-database-security.com/advisory/oracle_forms_unsecure_temp_file_handling.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21347",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers."
    },
    {
      "lang": "es",
      "value": "Oracle Forms 4.5, 6.0, 6i, y 9i  en Unix, cuando un número elevado de filas son recuperadas por un formulario Oracle, almacena una copia de las tablas de la base de datos en un fichero legible por todo el mundo, lo que permite que usuarios locales obtengan información confidencial tal como números de tarjeta de crédito."
    }
  ],
  "lastModified": "2026-06-16T22:14:37.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:forms:4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B720808-BCFF-4917-82E3-2F7B11355406"
            },
            {
              "criteria": "cpe:2.3:a:oracle:forms:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38D1AB63-14C5-4343-962B-BC8FC03B412A"
            },
            {
              "criteria": "cpe:2.3:a:oracle:forms:6i:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D38985A2-F5F6-4157-92C0-CE80B7F37013"
            },
            {
              "criteria": "cpe:2.3:a:oracle:forms:9i:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75E934ED-92DE-47C3-94C4-6714A32FC32A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}