Use of Password Hash With Insufficient Computational Effort in Apache Derby

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2009-4269 · ADVISORY
• apache/derby commit 178ca0c · WEB
• apache/derby commit 23f97a5 · WEB
• apache/derby commit 3b82686 · WEB
• apache/derby commit 60edeb0 · WEB
• apache/derby commit 8c305e2 · WEB
• issues.apache.org/jira/browse/DERBY-4483 · WEB
• db.apache.org/derby/releases/release-10.6.1.0.cgi · WEB
• marc.info · WEB
• oracle.com/technetwork/topics/security/cpujan2011-194091.html · WEB
• blogs.sun.com/kah/entry/derby_10_6_1_has

Lỗ hổng khác của org.apache.derby:derby

• CVE-2022-46337NGHIÊM TRỌNG 9.8A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker …
• CVE-2018-1313TRUNG BÌNH 5.3In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database…
• CVE-2010-2232CAO 7.5In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.
• CVE-2015-1832NGHIÊM TRỌNG 9.1XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in plac…
• CVE-2006-7217TRUNG BÌNH 4.0Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote auth…