[Previous entry: "Security expert calls for Oracle makeover"] [Next entry: "My site is moving so could go down for a short while"]
Exploit code available for one of the bugs fixed in April 2006 CPU
April 20th, 2006 by Pete
Post to del.icio.us
Post to Furl
Someone called N1V1Hd $3c41r3 has posted exploit code for the bug in the package function SYS.DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_METADATA to the bugtraq mailing list. The post is titled "Oracle 10g 10.2.0.2.0 DBA exploit" and it details how a package function can be created and then injected into DBMS_EXPORT_EXTENSION to grant DBA to a user called hacker.
Alex also has a page titled "SQL Injection via Oracle DBMS_EXPORT_EXTENSION in Oracle 9i / 10g" detailing the same exploit.
