Unscored CVE-2002-1637 EUVD-2002-1618GHSA-728c-vq25-67f5

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, …

Published Mar 28, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.

References

default-oracle-applsys(972) vdb-entry
VU#712723 third-party-advisory
http://www.nextgenss.com/papers/hpoas.pdf
default-oracle-system(968) vdb-entry
default-oracle-apps(971) vdb-entry
default-oracle-sys(969) vdb-entry
default-oracle-scott(970) vdb-entry