Exploitation Summary
EIP tracks 3 public exploits for CVE-2012-3137. PoCs published by Esteban Martinez Fayo, r1-, hantwister.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Oracle Database 11g by decrypting session IDs using a list of common passwords. It leverages AES decryption with a SHA1-derived key to validate the password.
Description
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka "stealth password cracking vulnerability."
Exploits (3)
This exploit demonstrates an authentication bypass vulnerability in Oracle Database 11g by decrypting session IDs using a list of common passwords. It leverages AES decryption with a SHA1-derived key to validate the password.
This PoC exploits CVE-2012-3137, a vulnerability in Oracle TNS Listener, by crafting malicious TNS packets to trigger a buffer overflow, potentially leading to remote code execution. The script establishes a connection and sends specially crafted packets to manipulate the protocol negotiation phase.
This repository contains a proof-of-concept for CVE-2012-3137, which exploits a vulnerability in Oracle's authentication protocol. The code implements a man-in-the-middle (MitM) attack framework to intercept and manipulate network traffic.