full-disclosure - mod_pl/sql (oracle http server)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20041124180548.77381.qmail@web52201.mail.yahoo.com>
From: karmic_nirvana at yahoo.com (nirvana)
Subject: mod_pl/sql (oracle http server) - help

Hi Fellas,
I wanted to know how to configure oracle HTTP server to allow calling sys.* stored
procedures through http? It seems by default, sys.*, dbms_* etc. stored procedures are not allowed to be invoked through http. Also, it seems configuration files are different for 8i, 9i and 10g. I am using Oracle 9i(9.2.0.1.0).

-Thanks

raza <raza@...a.demon.co.uk> wrote:Well as a security professional I can testify that the sites you want
closed down ie reference to zone-h etc.. Are a valued source of
knowledge!

Obviously your not plugged into security and as such use these groups to
talk Shi* and justify your views of closing IRC Channels.

Thankfully your not in government and btw , not all readers on this list
are in the US , I am from the UK and its clear to me that you don't
understand the concept of freedom of information !

r

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Bruce
Ediger
Sent: 17 November 2004 20:29
To: full-disclosure@...ts.netsys.com
Subject: Re: FW: [Full-Disclosure] Shadowcrew Grand Jury Indictment

On Wed, 17 Nov 2004, n3td3v wrote:

...

> > If I was in gov, I would shut a site down that looks remotely
> > hax0rish, even if they've done nothing wrong. All these crews and
> > hacker groups, fk them all. The net needs zero tollerence with
online
> > crime. Govs should have the authority to close anything done because
> > they feel like it, without needing to prove shit.
> >
> > I would even close IRC channels. Hackphreak on undernet looks
> > harmless, but fk that. Close it anyway, its time to get a tighter
grip
> > on things.
...
> Same for zone-h.org, close the crap down.. f**k anything that looks
> remotely hax0rish.

Unfortunately, the US Government operates under the auspices of a small
document called "The Constitution", and a little concept called "Common
Law".
Now, I know that you trendy kids call things like that "quaint" (I
believe
that's what our new Attorney general calls things like the Geneva
Convention.
See
http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2004/06/13/wguan13.
xml&sSheet=/news/2004/06/13/ixworld.html)
but fortunately for the rest of us, "presumption of innocence" remains
the standard of the land.

If you small-minded totalitarians don't like that sacred principle, get
the hell out of the US. We don't need your kind. Move to some Banana
Republic where they change the rules all the time in the face of 1000
years of tradition and philosophy and the Blood of Patriots who died to
protect these rights.

"Zero tollerence". What will these doofuses think of next? I bet they
start up a cult of personality around the nation's leader, including a
new salute borrowed from the Romans.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

---------------------------------
Do you Yahoo!?
 Meet the all-new My Yahoo! – Try it today! 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041124/10a616b5/attachment.html