[REVS] Advanced SQL Injection in Oracle Databases

• Previous message: SecuriTeam: "[UNIX] Multiple SQL Injection Vulnerabilties in Chipmunk Forum"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: list@securiteam.com
Date: 6 Feb 2005 18:35:50 +0200

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

  Advanced SQL Injection in Oracle Databases
------------------------------------------------------------------------

SUMMARY

The linked presentation shows, with many examples, how the SQL Injection
vulnerabilities in applications that use Oracle databases can be exploited
and how to prevent this. The topics also include buffer overflow attacks
and examples using some of the recently discovered vulnerabilities in
Oracle software.

DETAILS

Topics (37 slides):
    * Introduction
    * SQL Injection attacks
          o How to exploit
          o Exploit examples
          o SQL Injection in functions defined with AUTHID CURRENT_USER
          o How to get around the need for CREATE PROCEDURE privilege -
Example
          o How to protect
    * Buffer overflow attacks
          o How to exploit
          o Exploit examples
          o Detecting an attack
    * Remote attacks using SQL Injection in a web application
          o Exploit examples
          o Web application worms
          o How to protect
    * Summary
    * Conclusions

ADDITIONAL INFORMATION

The information has been provided by <mailto:secemf@yahoo.com.ar> Esteban
Martinez Fayo.
The original article can be found at:
<http://security-papers.globint.com.ar/oracle_security/sql_injection_in_oracle.php> http://security-papers.globint.com.ar/oracle_security/sql_injection_in_oracle.php

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

• Previous message: SecuriTeam: "[UNIX] Multiple SQL Injection Vulnerabilties in Chipmunk Forum"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

• [UNIX] paFileDB SQL Injection
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... " <http://www.phparena.net/pafiledb.php>
  paFileDB is designed to allow web ... The paFileDB product has been found to contain an SQL
  Injection ... (Securiteam)
• [UNIX] phpCommunityCalendar Vulnerable to SQL Injections and Cross Site Scripting Attacks
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... Multiple SQL injection
  vulnerabilities and cross site scripting ... SQL Injection / Login bypass: ...
  (Securiteam)
• [NT] Multiple Vulnerabilities in GoSmart Message Board
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... a SQL Injection vulnerability
  and a Cross Site ... (Securiteam)
• [UNIX] Subdreamer SQL Injection
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... vulnerability, if
  the magic_quotes_gpc has been set to zero, this is due ... In this case an attacker can cause
  an SQL injection attack through the ... (Securiteam)
• [NT] DUPortal Pro SQL Injection
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... DUdirectory Pro
  can store unlimited number of links." ... Multiple SQL injection vulnerabilities have been
  discovered in cat.asp, ... (Securiteam)