BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN) Aug 11 2008 09:29PM
Team SHATTER (shatter appsecinc com)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The DBA role in Oracle Database is not the same as SYSDBA privilege,
which is granted to SYS. There are many things that a user granted the
DBA role can't do - the most important being the ability to alter SYS
owned objects. This is true on databases wh...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus