Feeds

Oracle in buffer overflow brown alert

Blitz that bug

  • alert
  • submit to reddit

Top 5 reasons to deploy VMware with Tegile

Security researchers are warning of a potentially nasty buffer over-run flaw in Oracle Database 9i
databases.

In common with such flaws, a buffer overflow in the iSQL*Plus module of Oracle 9i might allow an attacker to run arbitrary code in the security context of the Web server. iSQL*Plus is a Web-based application that allows users to query the database.

David Litchfield of NGS Software warns that the problem affects Oracle Database 9i R1,2 on all operating systems - not just Web servers. He decribes the problem as "high risk".

In an advisory posted on BugTraq last week he warns: "On most systems this will be the 'Oracle' user and on Windows the 'SYSTEM' user. Once the web server has been compromised attackers may then use it as a staging platform to launch attacks against the database server itself."

NGS Software alerted Oracle to this problem on the 18th of October and Oracle, last week, issued an alert. The Oracle bug number assigned to this issue is 2581911. Patches can be downloaded from the Oracle Metalinksite. ®

Beginner's guide to SSL certificates

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.