[Full-disclosure] 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
- From: "Andrea \"bunker\" Purificato" <bunker@xxxxxxxxxxxxx>
- Date: Mon, 02 Apr 2007 12:33:12 +0200
[0-day] Remote Oracle DBMS_AQ.ENQUEUE exploit (10g)
Grant or revoke dba permission to unprivileged user
Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
AUTHOR: Andrea "bunker" Purificato
http://rawlab.mindcreations.com
DATE: Mon Apr 2 11:54:22 CEST 2007
PATCH: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html
(CVE-2007-0268 ?)
You can find the evil code here:
http://rawlab.mindcreations.com/codes/exp/oracle/dbms_aq-enqueue.pl
Regards,
--
Andrea "bunker" Purificato
+++++++++++[>++++++>+++++++++++++++++++++++++++++++++>++++
++++++<<<-]>.>++++++++++.>.<----------.>---------.<+++++++.
http://rawlab.mindcreations.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Follow-Ups:
- Re: [Full-disclosure] [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA
- From: Andrea \"bunker\" Purificato
- Re: [Full-disclosure] 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
- From: Gadi Evron
- Re: [Full-disclosure] [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA
- Prev by Date: Re: [Full-disclosure] Windows .ANI LoadAniIcon Stack Overflow
- Next by Date: Re: [Full-disclosure] Windows .ANI LoadAniIcon Stack Overflow
- Previous by thread: [Full-disclosure] Metasploit vs ANI
- Next by thread: Re: [Full-disclosure] 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
- Index(es):
Relevant Pages
|
|
