Korean
<< Back
VID 25157
Severity 30
Port 1521, ...
Protocol TCP
Class DB
Detailed Description PASSWORD_REUSE_TIME value of the ORACLE server on the host system is unsafe. PASSWORD_REUSE_TIME means number of days that must pass before the same password can be used again. If PASSWORD_REUSE_TIME value is not set or is set to less than 365, the possibility of password leak can increase.

* Platforms Affected:
UNIX any version
Linux any version
Microsoft Windows any version
Recommendation Reset PASSWORD_REUSE_TIME value as following.
SQL> ALTER PROFILE DEFAULT LIMIT
SQL> PASSWORD_REUSE_TIME 365; (or more)
SQL> ALTER PROFILE [profile_name] LIMIT
SQL> PASSWORD_REUSE_TIME default;
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)