EUVD-2005-1499

Malware in sbrugna...

Oracle Database DBMS_Scheduler Privilege Escalation (CVE-2005-1496)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages are provided to the database user in order to better manage the data. One such package is the DBMSScheduler, which is a task scheduling...

Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit

No description provided by source. // /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public...

Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit

// /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / / Written...

Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (1)

// /Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit/ /grant DBA and create new OS user using scheduller/ // /exploit grant DBA to scott/ /and execute OS command "net user"/ /using scheduler/ // /tested on oracle 10.1.0.5.0/ // // / Date of Public EXPLOIT: January 6, 2009 / / Written...

CVE-2005-1496

Oracle 10g DBMS_Scheduler Privilege Escalation (CVE-2005-1496): A flaw in the DBMS_Scheduler package allows a user with CREATE JOB privileges to switch SESSION_USER to SYS, enabling privilege escalation. Affected: Oracle 10g DBMS_Scheduler component. Root cause: vulnerability in how DBMS_Schedule...

CVE-2005-1496

The DBMSScheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSIONUSER to the SYS user...

CVE-2005-1496

The DBMSScheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSIONUSER to the SYS user...

Oracle 10g Exploit dbms_scheduler SESSION_USER issue

Name DBMSSCHEDULER SESSIONUSER issue in Oracle 10g Systems Affected Oracle 10g Severity Medium Risk Category Switch Oracle Username to user SYS Vendor URL http://www.oracle.com/ Credit Oracle Metalink Forum 633336.995 Exploit...