CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!...
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.
Exploit likelihood
What each source reports
NVD Score used
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.
- Record
CVE-2004-1367- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.
- Record
CVE-2004-1367- Updated
- 2026-11-02
EUVDEUVD-2004-1364 No score
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.
- Record
EUVD-2004-1364- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxr8-54m4-297v No score
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!...
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.
- Record
GHSA-mxr8-54m4-297v- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1367 is a medium vulnerability (CVSS 4.4) in Oracle Application Server, published August 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.27%, the 94th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=110382247308064&w=2
kb.cert.org/vuls/id/316206
us-cert.gov/cas/techalerts/TA04-245A.html
ngssoftware.com/advisories/oracle23122004D.txt
oracle.com/technology/deploy/security/pdf/2004alert68.pdf
sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
nvd.nist.gov/vuln/detail/CVE-2004-1367
github.com/advisories/GHSA-mxr8-54m4-297v