Security focus newsletter #266 included news of the above bug. This is fixed in Oracle alert #68 but Security Focus has assigned a specific BID number, 11120 to this issue because specific technical information has been released. This is one of the un-disclosed vulnerabilities in BID 10871 assigned by Security Focus to Oracle alert #68. This looks like its the buffer overflow in the built in function SYS_CONTEXT. Alexander Kornbrust has been credited with this vulnerability.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "eweek article: Oracle Users Take Aim at High Costs, Security Silence"] [Next entry: "Creating read only users"]
September 2004
- A new Oracle security based weblog - 09/20/2004 by 09/20/2004
- Are your system triggers firing? - 09/21/2004 by 09/21/2004
- Arup Nanda is interviewed about the Oracle security patch nightmare - 09/22/2004 by 09/22/2004
- The SANS S.C.O.R.E. Oracle security checklist has been updated - 09/23/2004 by 09/23/2004
- KK Mookhey writes about auditing Oracle security - 09/24/2004 by 09/24/2004
- eweek article: Oracle Users Take Aim at High Costs, Security Silence - 09/25/2004 by 09/25/2004
- Oracle Database 9i SQL Command Buffer Overflow Vulnerability - 09/26/2004 by 09/26/2004
- Creating read only users - 09/28/2004 by 09/28/2004
- Oracle announce that clients also need patching for alert #68 - 09/30/2004 by 09/30/2004
Archives
Syndication
Powered by gm-rss 2.0.0
