Cursor snarfing - a new class of vulnerability and attack in Oracle

To: <bugtraq@xxxxxxxxxxxxxxxxx>, <dbsec@xxxxxxxxxxxxx>
Subject: Cursor snarfing - a new class of vulnerability and attack in Oracle
From: "David Litchfield" <davidl@xxxxxxxxxxxxxxx>
Date: Mon, 27 Nov 2006 08:36:39 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hey all,

I've just written a paper detailing a fairly common PL/SQL programming errorrelated to cursors that leads to a new class of vulnerability in Oracle. Youcan get a copy of the paper from http://www.databasesecurity.com/ .

Cheers,
David Litchfield
NGSSoftware Ltd
+44(0) 208 401 0070
http://www.ngssoftware.com/

Prev by Date: 2nd European Conference on Computer Network Defense (EC2ND)
Next by Date: AIDE problem handling symlinks
Previous by thread: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
Next by thread: AIDE problem handling symlinks
Index(es):
- Date
- Thread