Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Fwd: [Full-disclosure] Workaround for unpatched Oracle PLSQL Gateway fl

from [noelk] Network Security [Permanent Link]
Subject: [Fwd: [Full-disclosure] Workaround for unpatched Oracle PLSQL Gateway flaw]
Date: Thu, 26 Jan 2006 12:27:49 -0500 
Are there any scripts to check for the volnerability in existing databases/web 
servers.  
We are looking into the riskmentioned and would like to be
able to verify how many of our instances are vulnerable.  If I new what
package or is it mod_plsql that has the vulnerability I can eleminate
instances that don't have the package installed.

Ken


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Fwd: [Full-disclosure] Workaround for unpatched Oracle PLSQL Gateway flaw], noelk <=
Previous by Date:  [Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack, Cisco Systems Product Security Incident Response Team
Next by Date:  RE: [Full-disclosure] Cisco Security Advisory: Cisco VPN 3000Concentrator Vulnerable to Crafted HTTP Attack, James Lay
Previous by Thread:  [Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack, Cisco Systems Product Security Incident Response Team
Next by Thread:  [Full-disclosure] [SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution, Martin Schulze
Indexes:  [Date] [Thread] [Top] [All Lists]