bugtraq - PeteFinnigan.com - Oracle security advisory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <rnHKxhAqCZ7BRxYm@peterfinnigan.demon.co.uk>
Date: Tue, 18 Jan 2005 22:41:46 +0000
From: Pete Finnigan <plsql@...efinnigan.com>
To: bugtraq@...urityfocus.com
Subject: PeteFinnigan.com - Oracle security advisory

Hi

I have just created a security advisory for the issue I found that is
fixed in Oracle latest security patch. The issue is with abuse of
DIRECTORY objects and can be found here 
http://www.petefinnigan.com/directory_traversal.pdf - I have also
updated my Oracle security alerts page to link to this advisory and also
those of other researchers who found bugs fixed by the same Oracle
patch. My alerts page is http://www.petefinnigan.com/alerts.htm - There
is also some discussion about Oracles new quarterly critical security
patch schedule in my Oracle security weblog http://www.petefinnigan.com/
weblog/entries/index.html

Kind regards

Pete
-- 
Pete Finnigan (email:pete@...efinnigan.com)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.