bugtraq - 0day Oracle 10g exploit - dbms_aq.enqueue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1175509992.7527.6.camel@fin>
Date: Mon, 02 Apr 2007 12:33:12 +0200
From: "Andrea \"bunker\" Purificato" <bunker@...twebnet.it>
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA

[0-day] Remote Oracle DBMS_AQ.ENQUEUE exploit (10g)

Grant or revoke dba permission to unprivileged user
Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0"
   
  AUTHOR: Andrea "bunker" Purificato
          http://rawlab.mindcreations.com

  DATE:   Mon Apr  2 11:54:22 CEST 2007
 
  PATCH:  http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html
          (CVE-2007-0268 ?)


You can find the evil code here: 
http://rawlab.mindcreations.com/codes/exp/oracle/dbms_aq-enqueue.pl


Regards,
-- 
Andrea "bunker" Purificato
+++++++++++[>++++++>+++++++++++++++++++++++++++++++++>++++
++++++<<<-]>.>++++++++++.>.<----------.>---------.<+++++++.

http://rawlab.mindcreations.com