Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: A New Class of Vulnerability in Oracle: Lateral SQL Injection
From: malix () hush com
Date: Thu, 24 Apr 2008 13:47:24 -0700

And here I thought you were canceling that piece of shit.
That you even presume to believe that David Litchfield of all 
people gives the slightest fuck about what you have to say simply 
blows my mind.
As always, please (and let me spell it out for you), SHUT THE FUCK 
UP.

On Thu, 24 Apr 2008 13:32:43 -0700 n3td3v <xploitable () gmail com> 
wrote:
On Thu, Apr 24, 2008 at 5:49 PM, David Litchfield
<davidl () ngssoftware com> wrote:
Hey all,
 I've just released some research that demonstrates a new class 
of
 vulnerability in Oracle and how it can be exploited by an 
attacker. You can
 grab the paper from here:
 http://www.databasesecurity.com/dbsec/lateral-sql-injection.pdf
 Cheers,
 David Litchfield
 NGSSoftware Ltd
 http://www.ngssoftware.com/
 http://www.davidlitchfield.com/blog


Thanks for waiting until Web Application Security Awareness Day,

All the best,

n3td3v

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

--
Click here to compare rates and find the best deal on renting a car.
http://tagline.hushmail.com/fc/Ioyw6h4eRvD8OebJMba3jGtSFzdQpeikv8jYecE9cx4Yl239ZI8uxC/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]