Oracle Database Vault权限提升漏洞

BUGTRAQ ID: 32393 Oracle Database Vault是业界最先进的数据库安全产品，可保护和限制对敏感数据及应用的访问。 Database Vault没有正确地限制从操作系统端对数据库的访问，任何以SYSDBA权限登录的UNIX帐号都可以使用ptrace2绕过预期的安全限制，非授权访问敏感数据。 Oracle Database Vault 10.2.0.3 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 创建的DBA的UNIX帐号为OSDBA组成员，oracle SUID二进制程序和共享内存对OSDBA组仅有读权限。...

Oracle Database Vault - 'ptrace(2)' Local Privilege Escalation

/ original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested on 10.2.0.3, CentOS 5. For other architectures/OS combos...

Oracle Database Vault - ptrace(2) Local Privilege Escalation

Oracle Database Vault - ptrace2 Local Privilege Escalation / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested ...

Oracle Database Vault ptrace(2) Privilege Escalation Exploit

Exploit for linux platform in category local exploits ============================================================ Oracle Database Vault ptrace2 Privilege Escalation Exploit ============================================================ / original release: http://vnull.pcnet.com.pl/blog/?p=92...

Oracle Database Vault ptrace(2) Privilege Escalation Exploit

No description provided by source. / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak [email protected] 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested o...

CVE-2008-2591

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors...

Buffer overflow

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors...

CVE-2008-2591

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors...

CVE-2007-5512

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to 1 Database Vault component DB24 and 2 SQL Execution component DB26...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21...

CVE-2007-5514

Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to 1 Database Vault component DB24 and 2 SQL Execution component DB26...

CVE-2007-5514

CVE-2007-5514 pertains to Oracle Database 10.2.0.3 and involves multiple vulnerabilities affecting the Database Vault component (DB24) and the SQL Execution component (DB26). The initial description states unknown impact and attack vectors for these components. A connected Nessus CPU plugin (Octo...

CVE-2007-5512

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21...

CVE-2007-5514

Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to 1 Database Vault component DB24 and 2 SQL Execution component DB26...