Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
RE: Bypassing Oracle dbms_assert Jul 28 2006 01:52PM
Alexander Kornbrust (ak red-database-security com)
David,

It seems you missed it. To be honest I don't understand your email.

The problem exists and I have 36+ Oracle vulnerabilities (="dozens" in
10.2.0.1) where I can bypass dbms_assert. Oracle is aware of this problem
and has already assigned bug numbers for my findings (e.g. "7569081 - SQL
INJ...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus