Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit Dec 19 2006 09:10PM
none none com
-- $Id: raptor_oraextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $
--
-- raptor_oraextproc.sql - command exec via oracle extproc
-- Copyright (c) 2006 Marco Ivaldi <raptor (at) 0xdeadbeef (dot) info [email concealed]>
--
-- Directory traversal vulnerability in extproc in Oracle 9i and 10g
-- allows remote attackers to access...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus