Skip navigation.

Pete Finnigan

Syndicate content Pete Finnigan's Oracle security weblog
PeteFinnigan.com's weblog is the only weblog dedicated to Oracle security.
Updated: 2 days 21 hours ago

Pete Finnigan webinar "The right way to secure Oracle"

Sat, 2009-09-26 20:50

I am going to give my successful presentation "The right way to secure Oracle" as a webinar tomorrow in conjunction with Sentrigo. The registration details are here . Come along and listen....[Read More]

Posted by Pete On 21/07/09 At 10:00 AM

Categories: Security Blogs

Escalate privileges to SYSDBA with CREATE USER

Sat, 2009-09-19 20:35

Paul emailed me the other day to send his new paper that shows how he was able to exploit a problem with Oracles namespace resolution. The idea is that because a user may have the CREATE USER privilege so he....[Read More]

Posted by Pete On 16/07/09 At 11:08 AM

Categories: Security Blogs

Latest Oracle CPU is out

Sat, 2009-09-19 20:35

The latest in the reasonably long line of Oracle quarterly CPU's is now out. It was available yesterday evening UK time. I was out teaching my two day class for the last two days so missed it until this morning....[Read More]

Posted by Pete On 15/07/09 At 11:28 AM

Categories: Security Blogs

Poor mans database vault

Sat, 2009-08-29 19:50

I got an email from Chet Justice the other day talking about some free software he is creating called "poor mans database vault". The description from his site: The goal is simple, have a simple, easy to use version of....[Read More]

Posted by Pete On 08/07/09 At 10:14 AM

Categories: Security Blogs

A new database security auditing and scanner product, some BBED, ASM and AV

Sat, 2009-08-29 19:50

Well, it has been a very long time since my last post. I keep wanting to write a post but my time is so extremely limited at the moment that its hard to keep on top of work, emails, familly....[Read More]

Posted by Pete On 06/07/09 At 03:43 PM

Categories: Security Blogs