[Previous entry: "Red Database Security issues two new Oracle security advisories"] [Next entry: "Who_has_priv.sql, who_can_access.sql and who_has_role.sql updated"]
Alex has updated his Oracle exploits page to add 5 more exploit codes
May 2nd, 2005 by Pete
Post to del.icio.us
Post to Furl
I just noticed this evening that Alex has updated his Oracle Security exploits page to add 5 new exploits. These are:
Buffer Overflow in DBMS_REPCAT_INSTANTIATE
Become DBA via DBMS_SYS_SQL
Stop remote Listener via lsnrctl added
Switch username to SYS after executing a database job via dbms_scheduler added
SQL Injection in Oracle Portal WWV_LOV
Be aware of these issues, if you are not patched then you are vulnerable.
