SV: [Full-Disclosure] [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server
kruse at krusesecurity.dk
Fri Sep 3 23:13:03 BST 2004
>Actually this sounds like someone stole Litchfield's research -
>but what do I
>know. Just seems like too much coincidence since his last talk dealt with
>procedure based vulns.
No, these are separate issues.
This is a coordinated update that fixes multiple vulnerabilities in Oracle.
Details from NGSSoftware won't be disclosed until after 3 months. However,
the advisory publiced by Application Security Inc. contains sufficient data
that could be abused to start exploiting Oracle databases immediately.
Full-Disclosure is hosted and sponsored by Secunia.