Oracle 9i/10g Database OBJECT_TYPE Remote SQL Injection Vulnerability

Oracle 9i/10g Database OBJECT_TYPE Remote SQL Injection Vulnerability

References:

Critical Patch Update - April 2005 (Oracle)
Oracle Homepage (Oracle)
OraDBMS_METADATAExploit.txt (Argeniss)
OraDBMS_METADATAWorkaround.sql (Argeniss)
Multiple SQL Injection vulnerabilities in DBMS_METADATA package (Team SHATTER )

Privacy Statement
Copyright 2010, SecurityFocus