Description
catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.
References
- 20020812 Vulnerability in Oracle mailing-list
- oracle-catsnmp-default-account(9932) vdb-entry
- 9476 vdb-entry