Oracle 0-day to get SYSDBA access

Tanel Poder has found a way to get SYSDBA access to the Oracle database by utilising a user who has the BECOME USER system privilege, execute privileges on KUPP$PROC.CHANGEUSER and CREATE SESSION. he shows how a user with these privileges can become SYS but not SYSDBA and then use an immediate...