Auth bypass in Oracle Database Server
CVE-2012-3137
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka "stealth password cracking vulnerability."
Vulnerability class: Broken Authentication
EPSS: 0.314 (98.1th percentile) — read the EPSS interpretation.
Affected products
- Oracle Database_server — versions 10.2.0.3, 10.2.0.4, 10.2.0.5
- Oracle Primavera_p6_enterprise_project_portfolio_management — versions 8.2, 8.3, 8.4
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert_us@oracle.com (x_refsource_MISC, Press/Media Coverage)
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
- secalert_us@oracle.com (x_refsource_MISC, Press/Media Coverage)
- secalert_us@oracle.com (x_refsource_MISC, Press/Media Coverage)
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
Frequently asked questions
- What is CVE-2012-3137?
- CVE-2012-3137 is a vulnerability in Oracle Database Server, classified under Improper Authentication. Published 2012-09-21.
- Is CVE-2012-3137 known to be exploited?
- 17 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.