CVE-2006-0270

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-3mf7-49vm-cgqm

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle...

References (24)

• http://secunia.com/advisories/18493 Vendor Advisory
• http://secunia.com/advisories/18608 Vendor Advisory
• http://securitytracker.com/id?1015499
• http://www.kb.cert.org/vuls/id/545804 US Government Resource
• http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
• http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html
• http://www.securityfocus.com/archive/1/422262/30/7400/threaded
• http://www.securityfocus.com/bid/16287
• http://www.vupen.com/english/advisories/2006/0243 Vendor Advisory
• http://www.vupen.com/english/advisories/2006/0323 Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24186
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
• http://secunia.com/advisories/18493 Vendor Advisory
• http://secunia.com/advisories/18608 Vendor Advisory
• http://securitytracker.com/id?1015499