There is an interesting thread on bugtraq about Alex's DBMS_ASSERT bypass paper where David Litchfield has suggested that its not a generic bypass at all. Alex has countered in the thread titled "Re: Bypassing Oracle
dbms_assert" and given details of 36 bugs reported to Oracle using this technique including bug numbers.
For me I dont thing the semantics of whether its a generic bypass off DBMS_ASSERT or not matter. The fact is its possible to bypass DBMS_ASSERT, Alex has found over 36 examples of exploits using this technique in 10.2.0.1 (you need access to a PL/SQL unwrapper to be able to locate these bugs easily in the 10gR2 PL/SQL built in packages reported to Oracle. It is a bypass technique and it works and previously fixed bugs can be exploited still.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "A new Oracle exploit revealed on the bugtraq list"] [Next entry: "BlackHat Last week"]
July 2006
- Great SQL injection paper - 07/02/2006 by 07/02/2006
- Nice post by Eddie about undocumented pragmas - 07/03/2006 by 07/03/2006
- More on SYSDBA caching - 07/05/2006 by 07/05/2006
- Nice three part article on FGA - 07/07/2006 by 07/07/2006
- Mary Ann speaks - on security testing rules - 07/10/2006 by 07/10/2006
- oh the irony... - 07/14/2006 by 07/14/2006
- Alex has an analysis of CPU July 2006 and also advisories - 07/18/2006 by 07/18/2006
- Oracle's summer update fixes 65 flaws - 07/19/2006 by 07/19/2006
- Blackhat Las Vegas 2006 and unwrapping PL/SQL - 07/24/2006 by 07/24/2006
- Oracle Password Repository - 07/26/2006 by 07/26/2006
- SQL Injection video - 07/27/2006 by 07/27/2006
- An interesting thread on Alex's DBMS_ASSERT paper - 07/28/2006 by 07/28/2006
Archives
Syndication
Powered by gm-rss 2.0.0
