NuytsTech Security

CVE-2006-0270

by ·

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.

Date published : 2006-01-18

http://www.securityfocus.com/bid/16287

http://www.securityfocus.com/archive/1/422262/30/7400/threaded

Tags: