CVE-2004-2134: Weak Encryption
Published Jan 28, 2004
·Updated
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
Affected Software
7 affected components
Oracle Application Server=9.0.2
Oracle Application Server=9.0.2.0.0
Oracle Application Server=9.0.2.0.1
Oracle Application Server=9.0.2.1
Oracle Application Server=9.0.2.2
Oracle Application Server=9.0.2.3
Oracle Application Server=9.0.3
Event History
Jan 28, 2004
CVE Published
05:00 AM
May 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2134?
CVE-2004-2134 is classified as a medium severity vulnerability due to its impact on password security.
2
How do I fix CVE-2004-2134?
To fix CVE-2004-2134, upgrade to a version of Oracle Application Server that employs a stronger encryption algorithm for passwords.
3
Which versions of Oracle Application Server are affected by CVE-2004-2134?
The affected versions of Oracle Application Server include 9.0.2.0.0, 9.0.2.1, 9.0.2.2, 9.0.2.3, and 9.0.3.
4
Can local users exploit CVE-2004-2134?
Yes, local users can exploit CVE-2004-2134 to decrypt passwords stored using the weak encryption algorithm.
5
What type of vulnerability is CVE-2004-2134?
CVE-2004-2134 is a cryptography vulnerability resulting from the use of a weak encryption algorithm for storing passwords.