mailing list archives
[Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure
From: Cesar <cesarc56 () yahoo com>
Date: Wed, 19 Apr 2006 17:02:56 -0700 (PDT)
Argeniss Security Advisory
Name: Oracle Database 10gR1 Buffer overflow in
VERIFY_LOG procedure (DB03)
Affected Software: Oracle Database Server version
Remote exploitable: Yes (Authentication to Database
Server is needed)
Credits: Esteban Martínez Fayó
Advisory Number: ARG040603
Oracle Database Server provides the DBMS_SNAPSHOT_UTL
package that includes capability to manage
This package contains the public procedure VERIFY_LOG
that is vulnerable to buffer overflow.
By default DBMS_SNAPSHOT_UTL has EXECUTE permission to
PUBLIC so any Oracle database user can exploit this
Exploitation of this vulnerability allows an attacker
to execute arbitrary code. It can also be exploited to
cause DoS (Denial of Service) killing Oracle server
Vendor was contacted and a Critical Patch Update was
Restrict access to the DBMS_SNAPSHOT_UTL package (See
Although this security bug is addressed in the
Critical Patch Update April 2006, for most of the
affected platforms there are no patches available at
Oracle informed that the missing patches would be
available on 01-May-06 !!!!
Searching for Oracle 0days?
Argeniss Ultimate 0day Exploits Pack
Argeniss - Information Security
*Application Security Experts*
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- [Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure Cesar (Apr 20)