[Previous entry: "Make Oracle PCI compliant"] [Next entry: "Hacking hardened and patched Oracle databases"]
Security analysis of the JInitiator buffer overflows
September 12th, 2007 by Pete
Post to del.icio.us
Post to Furl
Steve Kost has a good paper on his site titled "Security Analysis - Oracle JInitiator 1.1.8 Buffer Overflow Vulnerability Analysis" that talks about the recent JInitiator bugs found and reported by Will DorMann at US-Cert. Steve's paper gives an overview of the bug, an overview of JInitiator, the ActiveX Control overview, vulnerability analysis, a risk analysis and then goes into remediation steps that can be taken. This is a very detailed analysis and if, particularly you run E-Business Suite you should read and take note.
