Steve Kost has a good paper on his site titled "Security Analysis - Oracle JInitiator 1.1.8 Buffer Overflow Vulnerability Analysis" that talks about the recent JInitiator bugs found and reported by Will DorMann at US-Cert. Steve's paper gives an overview of the bug, an overview of JInitiator, the ActiveX Control overview, vulnerability analysis, a risk analysis and then goes into remediation steps that can be taken. This is a very detailed analysis and if, particularly you run E-Business Suite you should read and take note.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Make Oracle PCI compliant"] [Next entry: "Hacking hardened and patched Oracle databases"]
September 2007
- Code Breaking - 09/04/2007 by 09/04/2007
- Oracle security presentations - 09/09/2007 by 09/09/2007
- Make Oracle PCI compliant - 09/11/2007 by 09/11/2007
- Security analysis of the JInitiator buffer overflows - 09/12/2007 by 09/12/2007
- 6 Oracle security presentations added to Oracle security white papers page - 09/13/2007 by 09/13/2007
- Using Log Miner for database forensics - 09/14/2007 by 09/14/2007
- Decompilation - reality or myth - 09/16/2007 by 09/16/2007
- Oracle 11g Security - part 4 {Times and dates and lengths} - 09/17/2007 by 09/17/2007
- Oracle 11g Security - part 5 {Playing for time} - 09/19/2007 by 09/19/2007
- Oracle 11g Password algorithm revealed - 09/22/2007 by 09/22/2007
- September 2007 - 3 years of Oracle security blogging - 09/23/2007 by 09/23/2007
- Oracle Security on Windows presentation uploaded - 09/26/2007 by 09/26/2007
Archives
Syndication
Powered by gm-rss 2.0.0
