Unscored CVE-2001-0528 EUVD-2001-0521GHSA-7qpj-5967-8rc2

Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs…

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.

References

20010522 Vulnerability in Oracle E-Business Suite Release 11i Applications Desktop Integrator mailing-list
20010507 Oracle's ADI 7.1.1.10.1 Major security hole mailing-list
2694 vdb-entry
oracle-adi-plaintext-passwords(6501) vdb-entry