Monday, February 08, 2016
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
French Data Protection Authority Says Facebook Should Stop Collecting Non-User Data
Verizon Expores Yahoo Deal Options: report
Kingston Buys USB Technology and Assets of IronKey from Imation
LG'S Flagship SIGNATURE OLED TV Now Available In The U.S.
Imagination Tech CEO Steps Down As Company Reports Losses
Google Has A Gear VR Competitor In The Works: report
Sony Xperia Z5 and Xperia Z5 Compact Are Now Shipping In The U.S.
Following Outcry, Twitter's Dorsey Says Live Tweets Are Here To Stay
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
How to burn a backup copy of The Frozen Throne
Help make DVDInfoPro better with dvdinfomantis!!!
Copied dvd's say blank in computer only
menu making
 Home > News > General Computing > Researc...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, April 25, 2008
Researcher finds new way to hack Oracle database


Security researcher David Litchfield has released technical details of a new type of attack that could give a hacker access to an Oracle database.

Called a lateral SQL injection, the attack could be used to gain database administrator privileges on an Oracle server in order to change or delete data or even install software, Litchfield said in an interview on Thursday.

Litchfield first disclosed this type of attack at the Black Hat Washington conference last February, but on Thursday he published a paper with technical details.

In a SQL injection, attackers create specially crafted search terms that trick the database into running SQL commands. Previously, security experts thought that SQL injections would work only if the attacker was inputting character strings into the database, but Litchfield has shown that the attack can work using new types of data, known as date and number data types.

Litchfield's attack targets the Procedural Language/SQL programming language used by Oracle developers.

Oracle did not return so far a comment.


Previous
Next
Dell to factory-install Windows XP after June 30        All News        Pioneer and Matsushita Reach Basic Agreement on PDP Business
Dell to factory-install Windows XP after June 30     General Computing News      Microsoft Leaves MSN Music Subscribers in Cold

Source Link Get RSS feed Easy Print E-Mail this Message

Related News
Oracle To Kill Java Plug-in For Browsers
Oracle SettleS FTC Charges It Deceived Consumers About Java
Oracle Breakthrough SPARC M7 Processor and Systems Design
Oracle Unveils New Services, Layouts Java's Future
Google Loses Appeal In Case Against Oracle
Oracle Extends Enterprise Cloud Portfolio
Oracle, SAP Settle Lawsuit
Oracle's Ellison Steps Down
Oracle To Buy Micros Systems
Oracle Accelerates Its Databases
Oracle Wins Appeal In Legal Battle With Google
Microsoft Retains No. 1 Spot; Oracle Moves Into No. 2 In Global Software Market

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2016 - All rights reserved -
Privacy policy - Contact Us .