I saw from an email from Ivan today that there is an exploit on Milw0rm today for Oracle. The exploit is a Perl script that exploits the dbms_export_extension bug using the cursor injection technique that David has talked about recently. The script dbms_exp_extV2.pl is written by Andrea "bunker" Purificato. Enjoy!
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "New and Improved Oracle Exploits Coming at Black Hat"] [Next entry: "New attack technique puts Oracle in crosshairs"]
March 2007
- New and Improved Oracle Exploits Coming at Black Hat - 03/03/2007 by 03/03/2007
- More Oracle exploits - 03/05/2007 by 03/05/2007
- New paper on Oracle Forensics - 03/06/2007 by 03/06/2007
- Nice paper on BBED in French - 03/11/2007 by 03/11/2007
- Oracle forensics, UKOUG and blog troubles - 03/17/2007 by 03/17/2007
- Interesting post on previous values in datafiles - 03/22/2007 by 03/22/2007
- Oracle sues SAP for allegedly behaving like it has toward Linux - 03/23/2007 by 03/23/2007
- SQLGotcha 4.0 beta released on Sourceforge - 03/24/2007 by 03/24/2007
- 4 new Oracle exploits released - 03/26/2007 by 03/26/2007
- Site downtime - 03/28/2007 by 03/28/2007
- Cesar Cerrudo shows how to find more than 5 local 0-days in Oracle - 03/29/2007 by 03/29/2007
- 2 new exploits for Oracle - 03/30/2007 by 03/30/2007
Archives
Syndication
Powered by gm-rss 2.0.0
