CVE-1999-1256

Medium

Published: 04/03/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.93%

77th percentile - higher than 77% of all known CVEs

Summary

Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.

Risk Assessment

Local users can obtain the password, posing a risk of unauthorized access to the database.

Recommendation

It is recommended to secure the spoolmain.log file and consider using password encryption mechanisms.

Original NVD description (English source)

Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file.