Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle XML DB FTP服务登录审计漏洞
Vulnerability Description
Oracle Database是一款商业性质大型数据库系统。 Oracle的XML DB FTP服务在审计登录时存在几个漏洞,可能在特定情况下导致记录信息不正确。 当用户试图通过XDB FTP服务登录时,审计追踪会显示错误的USERID项,这可能会导致两个问题:首先,如果用户以SYSTEM登录的话,USERID列仅显示SYSTE(5个字符);其次,如果同一用户又试图以FOO用户的身份登录的话,USERID列中会记录FOOTE,其中的TE来自上一次登录的SYSTE[M]。仅在同一个连接的TCP线路上才会出现
CVSS Information
N/A
Vulnerability Type
N/A