Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle catalog创建默认用户/口令漏洞
Vulnerability Description
Oracle是Oracle公司开发的一款大型商业数据库系统。 Oracle的catsnmp catalog脚本在建立用户时使用默认口令，攻击者可以利用这个口令获取对数据库的未授权访问。 Oracle 8i/9i包含catsnmp catalog脚本($ORACLE_HOME/rdbms/admin)可以用于删除和重建dbsnmp用户，并使用默认的"dbsnmp"密码。此用户在Oracle 8i系统中的权限属于V_$ views组，而在Oracle 9i系统中此用户被授予"SELECT ANY DICTIO
CVSS Information
N/A
Vulnerability Type
N/A