Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Mailing Lists -> Oracle-L -> Re: Do not connect Oracle DB to the Internet. Oracle Alert #59
Thanks for sharing that Pete
ta
tony
At 02:39 AM 24/10/2003 -0800, you wrote:
>>>So who found out this vulnerability? David Litchfield? Aaron Newman?
>>>I know it is a bit silly to ask but does anyone know how
>>>to exploit this vulnerability? Send it to me directly if you dont want to
>>>reply publicly
>
>Hi,
>
>Some guy called c0ntex, email c0ntex_at_hushmail.com found it. If you want
>to know how to exploit it then just search google for "C0ntex Oracle"
>and many pages pop up with exploit code on them. For instance:
>
>http://www.security-corporation.com/exploits-20031018-000.html
>
>kind regards
>
>Pete
>--
>Pete Finnigan
>email:pete_at_petefinnigan.com
>Web site: http://www.petefinnigan.com - Oracle security audit specialists
>Book:Oracle security step-by-step Guide - see http://store.sans.org for details.
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>--
>Author: Pete Finnigan
> INET: oracle_list_at_peterfinnigan.demon.co.uk
>
>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>San Diego, California -- Mailing list and web hosting services
>---------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: INET: tjambu_fatcity_at_yahoo.com.au Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Fri Oct 24 2003 - 10:54:24 CDT