CVE-2012-3137: Medium severity oracle database vulnerability
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka "stealth password cracking vulnerability."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3137?
CVE-2012-3137 has been classified as a high severity vulnerability due to its potential for allowing unauthorized access to user credentials.
How do I fix CVE-2012-3137?
To fix CVE-2012-3137, it is essential to update Oracle Database to a patched version that addresses this vulnerability.
What platforms are affected by CVE-2012-3137?
CVE-2012-3137 affects various versions of Oracle Database including 10.2.0.3 to 10.2.0.5 and 11.1.0.7 to 11.2.0.3.
What types of attacks can be executed due to CVE-2012-3137?
CVE-2012-3137 enables attackers to conduct brute force password cracking, compromising user sessions and credentials.
Is CVE-2012-3137 specific to certain Oracle products?
Yes, CVE-2012-3137 specifically affects Oracle Database and Oracle Primavera P6 Enterprise Project Portfolio Management versions stated in the vulnerability details.