CVE-2012-3137

Related Files

Oracle 11g Stealth Password Cracking

Posted Feb 21, 2013

Authored by Esteban Martinez Fayo | Site appsecinc.com

Team SHATTER Security Advisory - There is a flaw in the way that Authentication Session Keys are generated and protected by Oracle Database Server during the authentication process. It is possible to use this flaw to perform unlimited password guesses (cracking) of any user password in a similar way as if the password hash would be available. Oracle Database version 11gR1 and 11gR2 are affected.

tags | advisory

advisories | CVE-2012-3137

SHA-256 | 6de8cff55b66f1dae7efecbf927e6903f0d40a21e1f69993bb4e363b2732b39d

Download | Favorite | View

Oracle Database Authentication Protocol Security Bypass

Posted Oct 18, 2012

Authored by Esteban Martinez Fayo

Oracle database versions 11g R1 and R2 suffers from an authentication bypass vulnerability.

tags | exploit, bypass

advisories | CVE-2012-3137

SHA-256 | 3d1df41aeb031aab2d0c70fea0157cca30e1d068514cdf4a5bae58085165fa55

Download | Favorite | View