PeteFinnigan.com - Oracle security advisory

From: Pete Finnigan <oracle_list_at_peterfinnigan.demon.co.uk>
Date: Tue, 18 Jan 2005 22:39:45 +0000
Message-ID: <mXRJdcAxAZ7BBx6Y@peterfinnigan.demon.co.uk>

I have just created a security advisory for the issue I found that is fixed in Oracle latest security patch. The issue is with abuse of DIRECTORY objects and can be found here http://www.petefinnigan.com/directory_traversal.pdf - I have also updated my Oracle security alerts page to link to this advisory and also those of other researchers who found bugs fixed by the same Oracle patch. My alerts page is http://www.petefinnigan.com/alerts.htm

Kind regards

Pete
--

Pete Finnigan (email:pete_at_petefinnigan.com) Web site: http://www.petefinnigan.com - Oracle security audit specialists Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

--

http://www.freelists.org/webpage/oracle-l Received on Tue Jan 18 2005 - 21:50:02 CST