Full Disclosure mailing list archives

Re: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server

From: Cesar <cesarc56 () yahoo com>
Date: Fri, 3 Sep 2004 16:18:32 -0700 (PDT)


Most of the vulns are almost one year old. We don't
steal anything. 

BTW: finding vulns in Oracle products is like fishing
in a pool full of fishes. Not big deal.


Cesar.
--- xbud <xbud () g0thead com> wrote:

Actually this sounds like someone stole Litchfield's
research - but what do I 
know.  Just seems like too much coincidence since
his last talk dealt with 
procedure based vulns.




                
__________________________________
Do you Yahoo!?
Read only the mail you want - Yahoo! Mail SpamGuard.
http://promotions.yahoo.com/new_mail 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server SHATTER (Sep 01)
- Re: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server Mark Shirley (Sep 02)
  - Re: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server xbud (Sep 03)
    - Re: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server Cesar (Sep 03)
    - SV: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server Peter Kruse (Sep 03)
    - Re: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server Richard Johnson (Sep 04)