SecurityFocus

0day Oracle 10g exploit - dbms_aq.enqueue - become DBA Apr 02 2007 10:33AM
Andrea \bunker\ Purificato (bunker fastwebnet it) (2 replies)

[0-day] Remote Oracle DBMS_AQ.ENQUEUE exploit (10g)

Grant or revoke dba permission to unprivileged user
Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"

AUTHOR: Andrea "bunker" Purificato
http://rawlab.mindcreations.com

DATE: Mon Apr 2 11:54:22 CEST 2007

PATCH: http://www.oracle.com/technology/deploy/security/critical-patch-updates/
cpujan2007.html
(CVE-2007-0268 ?)

You can find the evil code here:
http://rawlab.mindcreations.com/codes/exp/oracle/dbms_aq-enqueue.pl

Regards,
--
Andrea "bunker" Purificato
+++++++++++[>++++++>+++++++++++++++++++++++++++++++++>++++
++++++<<<-]>.>++++++++++.>.<----------.>---------.<+++++++.

http://rawlab.mindcreations.com

[ reply ]

Re: [Full-disclosure] [RECTIFY] Oracle 10g exploit -dbms_aq.enqueue - become DBA Apr 03 2007 01:14PM
Andrea \bunker\ Purificato (bunker fastwebnet it)

Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA Apr 02 2007 06:12PM
Gadi Evron (ge linuxbox org) (1 replies)

Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA Apr 02 2007 06:32PM
Andrea Purificato - bunker (bunker fastwebnet it)