Full Disclosure mailing list archives
Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection
From: malix () hush com
Date: Thu, 24 Apr 2008 13:47:24 -0700
And here I thought you were canceling that piece of shit. That you even presume to believe that David Litchfield of all people gives the slightest fuck about what you have to say simply blows my mind. As always, please (and let me spell it out for you), SHUT THE FUCK UP. On Thu, 24 Apr 2008 13:32:43 -0700 n3td3v <xploitable () gmail com> wrote:
On Thu, Apr 24, 2008 at 5:49 PM, David Litchfield <davidl () ngssoftware com> wrote:Hey all, I've just released some research that demonstrates a new classofvulnerability in Oracle and how it can be exploited by anattacker. You cangrab the paper from here: http://www.databasesecurity.com/dbsec/lateral-sql-injection.pdf Cheers, David Litchfield NGSSoftware Ltd http://www.ngssoftware.com/ http://www.davidlitchfield.com/blogThanks for waiting until Web Application Security Awareness Day, All the best, n3td3v _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-- Click here to compare rates and find the best deal on renting a car. http://tagline.hushmail.com/fc/Ioyw6h4eRvD8OebJMba3jGtSFzdQpeikv8jYecE9cx4Yl239ZI8uxC/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection malix (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection n3td3v (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection Kurt Dillard (Apr 24)
- Message not available
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection n3td3v (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection Valdis . Kletnieks (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection n3td3v (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection Ureleet (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection Ureleet (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection nnp (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection n3td3v (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection nnp (Apr 24)
- Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection n3td3v (Apr 24)