[REVS] Advanced SQL Injection in Oracle Databases

From: SecuriTeam (support_at_securiteam.com)
Date: 02/06/05

  • Next message: SecuriTeam: "[NEWS] Linksys PSUS4 DoS" 
    To: list@securiteam.com
Date: 6 Feb 2005 18:35:50 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    The SecuriTeam alerts list - Free, Accurate, Independent.

    Get your security news from a reliable source.
    http://www.securiteam.com/mailinglist.html

    - - - - - - - - -

      Advanced SQL Injection in Oracle Databases
    ------------------------------------------------------------------------

    SUMMARY

    The linked presentation shows, with many examples, how the SQL Injection
    vulnerabilities in applications that use Oracle databases can be exploited
    and how to prevent this. The topics also include buffer overflow attacks
    and examples using some of the recently discovered vulnerabilities in
    Oracle software.

    DETAILS

    Topics (37 slides):
        * Introduction
        * SQL Injection attacks
              o How to exploit
              o Exploit examples
              o SQL Injection in functions defined with AUTHID CURRENT_USER
              o How to get around the need for CREATE PROCEDURE privilege -
    Example
              o How to protect
        * Buffer overflow attacks
              o How to exploit
              o Exploit examples
              o Detecting an attack
        * Remote attacks using SQL Injection in a web application
              o Exploit examples
              o Web application worms
              o How to protect
        * Summary
        * Conclusions

    ADDITIONAL INFORMATION

    The information has been provided by <mailto:secemf@yahoo.com.ar> Esteban
    Martinez Fayo.
    The original article can be found at:
    <http://security-papers.globint.com.ar/oracle_security/sql_injection_in_oracle.php> http://security-papers.globint.com.ar/oracle_security/sql_injection_in_oracle.php

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[NEWS] Linksys PSUS4 DoS"

    Relevant Pages

    • [UNIX] paFileDB SQL Injection
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... " <http://www.phparena.net/pafiledb.php> paFileDB is designed to allow web ... The paFileDB product has been found to contain an SQL Injection ...
      (Securiteam)
    • [UNIX] phpCommunityCalendar Vulnerable to SQL Injections and Cross Site Scripting Attacks
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Multiple SQL injection vulnerabilities and cross site scripting ... SQL Injection / Login bypass: ...
      (Securiteam)
    • [NT] Multiple Vulnerabilities in GoSmart Message Board
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... a SQL Injection vulnerability and a Cross Site ...
      (Securiteam)
    • [UNIX] Subdreamer SQL Injection
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... vulnerability, if the magic_quotes_gpc has been set to zero, this is due ... In this case an attacker can cause an SQL injection attack through the ...
      (Securiteam)
    • [NT] DUPortal Pro SQL Injection
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... DUdirectory Pro can store unlimited number of links." ... Multiple SQL injection vulnerabilities have been discovered in cat.asp, ...
      (Securiteam)