Alexander Kornbrust Oracle Security Blog » Print » First exploits for CPUJan2008 published

First exploits for CPUJan2008 published

Dieser Eintrag stammt von Alexander Kornbrust Am 31 Jan 2008 @ 16:29 In Exploit, SQL Injection | 8 Kommentare

The first exploits for CPU January 2008 were published on [1] milw0rm.com.

Alexandr Polyakov from [2] Digital Security published 4 exploits for XMLDB. Alexandr found and reported these vulnerabilities mid of december 2007 to Oracle. It seems that someone else reported these errors before because Oracle NEVER fixes vulnerabilities within less than a month.

[3] [4] SQL Injection in PITRIG_DROP (1)[3]
[6] SQL Injection in PITRIG_DROP (2)[7]
SQL Injection in PITRIG_TRUNCATE (1)
SQL Injection in PITRIG_TRUNCATE (2)

Dieser Artikel wurde ausgedruckt ab Alexander Kornbrust Oracle Security Blog: http://blog.red-database-security.com

URL zum Artikel: http://blog.red-database-security.com/2008/01/31/first-exploits-for-cpujan2008-published/

URLs in this post:
[1] milw0rm.com: http://www.milw0rm.com/
[2] Digital Security: http://www.dsec.ru
[3] : http://www.milw0rm.com/exploits/4996
[4] SQL Injection in PITRIG_DROP (1): http://www.milw0rm.com/exploits/4996
[5] : http://www.milw0rm.com/exploits/4996
[6] SQL Injection in PITRIG_DROP (2): http://www.milw0rm.com/exploits/4994
[7] : http://www.milw0rm.com/exploits/4994

Klicken hier zum Drucken.