Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]

Oracle - SQL Injection in package SDO_GEOM [DB06]

Subject: Oracle - SQL Injection in package SDO_GEOM [DB06]
Date: 16 Apr 2008 07:58:04 -0000
Systems Affected   9i Rel. 1 - 10g Rel. 2
Severity           High Risk
Category           SQL Injection
Vendor URL             http://www.oracle.com/
Author             Alexander Kornbrust
Advisory               16 April 2008 (V 1.00)
Advisory URL           
http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_geom.html
Details
The package SDO_GEOM is vulnerable against SQL injection.


Patch Information
Apply the patches for Oracle CPU April 2008.


History
6-jun-2007 Oracle secalert was informed
15-apr-2008 Oracle published CPU April 2008 [DB06]
16-apr-2008 Advisory published


© 2008 by Red-Database-Security GmbH
http://www.red-database-security.com

<Prev in Thread] Current Thread [Next in Thread>
  • Oracle - SQL Injection in package SDO_GEOM [DB06], ak <=