BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
OCIPasswordChange API leaks information of password hash (CVE-2012-0511) Apr 19 2012 08:50PM
Esteban Martinez Fayo (efayo appsecinc com)
-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

AppSecInc Team SHATTER Security Advisory

OCIPasswordChange API leaks information of password hash.

Risk Level:

High

Affected versions:

Oracle Database Server version 10gR1, 10gR2 (10.2.0.4 and previous

patchsets) and 11gR1 (11.1.0.7 and p...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus