Full Disclosure: CVE-2009-1979 (Oracle RDBMS)

[Dennis Yurichev <dennis () conus info>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi.

This vulnerability was ranked 10.0 (for Windows) in CPUoct2009 and
related to improper AUTH_SESSKEY parameter length validation.

http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html

Executable + source code attached.


- --
http://blogs.conus.info
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkrqwKkACgkQ1YPmFmJG++MnOACdGkO2KBaozIaLfwfbcwQrGZ9a
8B4AoLDfGrYatqKnemdd0jNWBeZAZXgJ
=FkPd
-----END PGP SIGNATURE-----

Attachment: CVE-2009-1979.zip
Description:

Attachment: CVE-2009-1979.zip.sig
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/