Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Database Security >> Database Security >> solaris zones
        
(Message started by: Pete Finnigan on Aug 24^th, 2009, 6:51pm)

Title: solaris zones
Post by Pete Finnigan on Aug 24^th, 2009, 6:51pm

I have a server with solaris 10 with trusted extensions. The zones are secret, global, unclassified , and so on.

I am using 1745 as a MLP (multi-level port). The listener is on a different port.

How can I spoof the database that is in one zone and connect from another?

Is there are docs out there dealing with zones and oracle?

I guess what I am asking is what are the security holes here?

thanks.