|
|
 
Mistakes are a fact of life
It is the response to error that counts.
Nikki Giovanni (b. 1943); US poetess.
- Buffer overflow in Oracle Database -
Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)
Madrid, February 27, 2004 - SecuriTeam has warned of the existence of buffer
overflows in two functions used by versions 9ir2 and earlier of Oracle
Database Server, which could be used with PL/SQL to convert numbers to
date/time intervals.
The problem occurs when any of these conversion functions are called with a
long string as a second parameter. Given that access to these functions is
not restricted, any Oracle Database user could exploit the vulnerability,
with the possibility of running arbitrary code or causing a denial of
service attack, killing the Oracle server process.
Oracle has released an update to fix the vulnerability, and is available at
Oracle Metalink (http://metalink.oracle.com).
NOTE: The address above may not show up on your screen as a single line.
This would prevent you from using the link to access the web page. If this
happens, just use the 'cut' and 'paste' options to join the pieces of the
URL.
|
|
|
 |
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
|
|
|
|
|
Average Score: 0
Votes: 0
|
|
|
