CVE-2008-4015

CVE-2008-4015 affects Oracle Database 10.1.0.5 in the Oracle Streams component, with the vulnerability related to SYS.DBMS_STREAMS_AUTH, allowing remote authenticated users to impact confidentiality and integrity. The issue is documented with a CVSS v2 base score of 5.5 (Network attack, low compl...

CVE-2008-3974

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPLT...

CVE-2008-3978

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-4015

Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSSTREAMSAUTH...

Oracle Secure Backup 10g exec_qr() Command Injection Vulnerability

Exploit for multiple platform in category remote exploits ================================================================== Oracle Secure Backup 10g execqr Command Injection Vulnerability ================================================================== Oracle Secure Backup 10g Remote Code...

Hack sniper Oracle system of eight routines-vulnerabilities and early warning-the black bar safety net

Description Oracle sales to customers peddling their database system has been put it touted as unbreakable, and pay lip service Easy cash up may not be so easy. Regardless of what the computer system, the people can always be found to attack it, Oracle is no exception. This article and everyone...

OraMon config/oramon.ini Information Disclosure

The remote host is running OraMon, an Oracle database monitoring tool written in PHP. The OraMon installation on the remote host stores its configuration file in the web document directory and fails to restrict access to it. An unauthenticated attacker can retrieve it and discover sensitive...

oramon-disclose.txt

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

OraMon 2.0.1 - Remote Configuration File Disclosure

OraMon 2.0.1 - Remote Configuration File Disclosure ........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring...

OraMon 2.0.1 - Remote Configuration File Disclosure

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== OraMon 2.0.1 Remote Config File Disclosure Vulnerability ========================================================...

Oracle Database Vault - ptrace(2) Local Privilege Escalation

Oracle Database Vault - ptrace2 Local Privilege Escalation / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested ...

Oracle Database Vault ptrace(2) Privilege Escalation Exploit

No description provided by source. / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak [email protected] 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested o...

Oracle Database Vault ptrace(2) Privilege Escalation Exploit

Exploit for linux platform in category local exploits ============================================================ Oracle Database Vault ptrace2 Privilege Escalation Exploit ============================================================ / original release: http://vnull.pcnet.com.pl/blog/?p=92...

Oracle Database 11g — EXFSYS PL/SQL injection vulnerability

Application: Oracle database 11G Versions Affected: Oracle 11.1.0.6 and 10.2.0.1 Vendor URL: http://oracle.com Bugs: PL/SQL Injections Exploits: YES Reported: 17.11.2008 Vendor response: 18.11.2008 Last response: 24.11.2008 Date of Public Advisory: 13.01.2009 Author: Alexandr Polyakov Description...

Oracle password file use and maintenance tips-vulnerability warning-the black bar safety net

Source: ctocio In the Oracle database system, a user if you want to the privilege identity of the userINTERNAL/SYSDBA/SYSOPERlog Oracle database can have two authentication methods: If used withoperating systemIntegrated Authentication or using the Oracle database password file for authentication...

Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database SQL Injection in SYS.DBMSCDCPUBLISH.ALTERAUTOLOGCHANGESOURCE November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Oracle 2008年10月紧急补丁更新修复多个漏洞

BUGTRAQ ID: 31683 CVECAN ID:...

Oracle数据库服务器CREATE ANY DIRECTORY权限提升漏洞

BUGTRAQ ID: 31738 Oracle是大型的商用数据库系统。 Oracle数据库中存在严重的权限提升漏洞，拥有CREATE ANY DIRECTORY权限的低权限用户可以通过UTLDIR用已知的二进制口令文件直接覆盖隐藏的口令文件获得SYSDBA权限。 Oracle Database 11g Oracle Database 10.2 Oracle Database 10.1 Oracle ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.oracle.com --note windows add...

CVE-2008-3983

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and...