Re: Is it possible to read a SGA's memory architecture ?

Vladimir M. Zakharychev wrote:

> Several council sites stated that
> the frequently announced LOCAL/SYSTEM privilege escalation exploits
> are one reason why they do not use Windows systems for sensitive
> applications within their organizations.
>
> Note the last sentence. :)

One I agree with. :-)

> Since you are in control of the machine, you don't need to elevate your
> privileges - you already have those you need. You can just write a simple
> dumper or use SoftICE+IceDump to get inside Oracle

Exactly.

--
Billy