Oracle Database Server Multiple Unspecified Vulnerabilities

Oracle database server is prone to SQL command execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CA Total Defense Suite UNCWS Multiple Report Stored Procedure SQL Injections (CVE-2011-1653)

CA Total Defense combines CA Anti-Virus, CA Anti-Spyware, CA Gateway Security and CA Host-Based Intrusion Prevention System. The unified network control UNC offers network access protection by validating endpoints requesting network access. Multiple SQL Injection vulnerabilities have been reporte...

EnterpriseDB PostgreSQL Plus Advanced Server Authentication Bypass

The DBA Management Server is a browser based Job Scheduling and monitoring environment for database monitoring, profiling, reporting, and querying with the capability of HTML and PDF report generation. An authentication bypass vulnerability has been reported in the DBA Management Server component...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

Postgres Plus SQL authentication bypass

Unauthorized access to DBA Management Server TCP/9000, TCP/9363...

The Oracle Quarterly Patch Update

January 18th marks the 6th anniversary of the Oracle Critical Patch Update CPU in its current form as a quarterly patch. For those who remember, before the CPU, Oracle released patches as Security Alerts, the last being Security Alert 68 at the end of August 2004. In the past 6 years, CPUs have...

DBA Gets 1-Year Sentence for Hacking Employer

A former senior database administrator for GEXA Energy in Houston was sentenced to 12 months in prison for hacking into his former employer’s computer network. Read the full article. Help Net Security...

Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Trigger

This module will escalate an Oracle DB user to MDSYS by exploiting a sql injection bug in the MDSYS.SDOTOPODROPFTBL trigger. After that exploit escalate user to DBA using "CREATE ANY TRIGGER" privilege given to MDSYS user by creating evil trigger in system scheme 2-stage attack. This module...

Oracle 10g - Multiple Privilege Escalation Vulnerabilities

Oracle 10g - Multiple Privilege Escalation Vulnerabilities source: https://www.securityfocus.com/bid/38115/info Oracle Database is prone to multiple remote privilege-escalation issues because it fails to properly restrict access to certain packages. The attacker can exploit these issues to escala...

Fedora 11 : rt3-3.8.2-12.fc11 (2009-12827)

Fri Dec 4 2009 Ralf Corsepius - 3.8.2-12 - Add rt-3.8.2-rh-bz543962.diff BZ 543962. - Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 -...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10268 CVE-ID: Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit...

Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10264 CVE-ID: Title: Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================== Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit ======================================================== Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit CVE-ID:...

Oracle - ctxsys.drvxtabc.create_tables

Oracle - ctxsys.drvxtabc.createtables -- -- ctxsys.drvxtabc.createtables -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ================================================= Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit ================================================= Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit CVE-ID: OSVDB-ID: Author: Andrea...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor -- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF:...