Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.6

Oracle Enterprise Manager saves SYSMAN password in clear text

CVE-2004-1366 · published 22 years ago
Summary

The Oracle Enterprise Manager component writes the SYSMAN account password in a file that can be read by anyone with access to the server. Because the password is not protected, a local user could copy it and gain full database administrator rights. Apply the latest security update, change the SYSMAN password, and restrict the file's permissions to trusted administrators only.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle application_server 9.0.2
9.0.2.0.0
9.0.2.0.1
9.0.2.1
9.0.2.2
9.0.2.3
9.0.3
9.0.3.1
9.0.4
9.0.4.0
9.0.4.1
cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
oracle collaboration_suite release_1
cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*
oracle e-business_suite 11.5.1
11.5.2
11.5.3
11.5.4
11.5.5
11.5.6
11.5.7
11.5.8
11.5.9
cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*
oracle enterprise_manager 9
9.0.1
cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*
oracle enterprise_manager_database_control 10.1.2
cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*
oracle enterprise_manager_grid_control 10.1.0.2
cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*
oracle oracle10g enterprise_9.0.4_.0
enterprise_10.1.0.2
personal_9.0.4_.0
personal_10.1_.0.2
standard_9.0.4_.0
standard_10.1_.0.2
cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*
oracle oracle8i enterprise_8.0.5_.0.0
enterprise_8.0.6_.0.0
enterprise_8.0.6_.0.1
enterprise_8.1.5_.0.0
enterprise_8.1.5_.0.2
enterprise_8.1.5_.1.0
enterprise_8.1.6_.0.0
enterprise_8.1.6_.1.0
enterprise_8.1.7_.0.0
enterprise_8.1.7_.1.0
enterprise_8.1.7_.4
standard_8.0.6
7 more version ranges
cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*
oracle oracle9i client_9.2.0.1
client_9.2.0.2
enterprise_8.1.7
enterprise_9.0.1
enterprise_9.0.1.4
enterprise_9.0.1.5
enterprise_9.2.0
enterprise_9.2.0.1
enterprise_9.2.0.2
enterprise_9.2.0.3
enterprise_9.2.0.4
enterprise_9.2.0.5
24 more version ranges
cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*
Original advisory text
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.6 Medium
Exploitation
15% chance of attack within 30 days
Type
CWE-255Credentials Management Errors
Timeline
Published4 Aug 2004
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2004-1366 · NVD
Track software like this
Free during beta