| EXTPROC [message #171530] |
Wed, 10 May 2006 06:25  |
gajini
Messages: 262
Registered: January 2006
|
Senior Member |
|
|
I didn't understand the concept of EXTPROC in listener.ora & tnsnames.ora.I studied that EXTPROC causes security vulnerability
Anyone explain me with an example,how EXTPROC causes security vulnerability.
Can anyone explain these lines also with an example which i read about EXTPROC,"malicious user can write an exploit that connects to an Oracle Database server’ s EXTPROC OS process without having to authenticate himself."
|
|
|
|
| Re: EXTPROC [message #181867 is a reply to message #171530] |
Wed, 12 July 2006 00:23  |
nmacdannald
Messages: 460
Registered: July 2005
Location: Stockton, California - US...
|
Senior Member |
|
|
|
I think EXTPROC allows an external program to be run using the database owner's authrization. I will check, but I was told to comment out the EXTPROC lines in the sqlnet.ora
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
