[NEWS] New Oracle Database Listener Security Guide Released
From: support@securiteam.com
Date: 04/08/03
- Previous message: support@securiteam.com: "[UNIX] Buffer Overflow in Samba allows remote root compromise"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: support@securiteam.com To: list@securiteam.com Date: 8 Apr 2003 13:29:35 +0200
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
In the US?
Contact Beyond Security at our new California office
housewarming rates on automated network vulnerability
scanning. We also welcome ISPs and other resellers!
Please contact us at: 323-882-8286 or ussales@beyondsecurity.com
- - - - - - - - -
New Oracle Database Listener Security Guide Released
------------------------------------------------------------------------
SUMMARY
Integrity has recently updated its Oracle Database Listener Security
Guide.
This paper describes the Oracle database listener, potential security
weaknesses, known vulnerabilities, and recommendations to properly
securing it.
DETAILS
About Oracle Listener:
The Oracle Database Listener provides network connectivity to an Oracle
database using Oracle's networking protocol SQL*Net. The Database
Listener, also referred to as the Oracle TNS Listener, can easily be
exploited to obtain information regarding an Oracle database. In
addition, numerous vulnerabilities exist, if not patched can be exploited
to gain access to the database server via buffer overflows and other
attacks. If the Listener is not properly secured, anyone can easily
shutdown the Listener preventing access to the database. This paper
overviews the security issues in the listener, reviews the known
vulnerabilities, and provides recommendations for properly securing it.
About the Paper:
The paper outlines vulnerabilities in the Oracle Database Listener and
provides recommendations for properly securing it. Providing minimal
security for the Listener is simple and should be done for all Oracle
installations - development, test and production.
The full paper can be downloaded from:
<http://www.integrigy.com/info/Integrigy_OracleDB_Listener_Security.pdf>
http://www.integrigy.com/info/Integrigy_OracleDB_Listener_Security.pdf
ADDITIONAL INFORMATION
This information has been provided by
<mailto:mailto:alerts@integrigy.com> alerts@integrigy.com.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Previous message: support@securiteam.com: "[UNIX] Buffer Overflow in Samba allows remote root compromise"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
