full-disclosure - Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 24 Apr 2008 13:47:24 -0700
From: malix@...h.com
To: full-disclosure@...ts.grok.org.uk, xploitable@...il.com
Subject: Re: A New Class of Vulnerability in Oracle:
	Lateral SQL Injection

And here I thought you were canceling that piece of shit.
That you even presume to believe that David Litchfield of all 
people gives the slightest fuck about what you have to say simply 
blows my mind.
As always, please (and let me spell it out for you), SHUT THE FUCK 
UP.

On Thu, 24 Apr 2008 13:32:43 -0700 n3td3v <xploitable@...il.com> 
wrote:
>On Thu, Apr 24, 2008 at 5:49 PM, David Litchfield
><davidl@...software.com> wrote:
>> Hey all,
>>  I've just released some research that demonstrates a new class 
>of
>>  vulnerability in Oracle and how it can be exploited by an 
>attacker. You can
>>  grab the paper from here:
>>  http://www.databasesecurity.com/dbsec/lateral-sql-injection.pdf
>>  Cheers,
>>  David Litchfield
>>  NGSSoftware Ltd
>>  http://www.ngssoftware.com/
>>  http://www.davidlitchfield.com/blog
>>
>
>Thanks for waiting until Web Application Security Awareness Day,
>
>All the best,
>
>n3td3v
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/

--
Click here to compare rates and find the best deal on renting a car.
http://tagline.hushmail.com/fc/Ioyw6h4eRvD8OebJMba3jGtSFzdQpeikv8jYecE9cx4Yl239ZI8uxC/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/