Re: Interesting Exploit in PL/SQL

1. stop comparing passwords
2. use exception handling " when others then null;" will defeat this exploit. So, this is one place where "when others then null;" is acceptable.

There ... no more exploit.
Let's get back to bashing 'latch free waits' or 'cache buffers chains'.

Raj

On 11/27/06, Mladen Gogala <mgogala_at_vmsinfo.com> wrote:
> Jared Still wrote:
> > Not easily exploited, but still possible.
> >
> > http://www.databasesecurity.com/dbsec/cursor-snarfing.pdf
> > <http://www.databasesecurity.com/dbsec/cursor-snarfing.pdf>

--
http://www.freelists.org/webpage/oracle-l