Tuesday, May 03, 2016
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Intel and Oculus Bring Virtual Reality to Best Buy Stores
NVIDIA and Samsung Agree to Settle IP Litigation
Samsung Develops 3rd Generation 14-Nano FinFET Low-power Process
IE Loses Top Web Browser Spot to Chrome
Qualcomm To Make Mobiles Smarter With New Snapdragon Machine Learning SDK
You Can No Longer Use Google In Cortana searches
HP Releases New Chromebook for Home and Office
AMD and Nantong Fujitsu Microelectronics Close on Semiconductor Assembly and Test Joint Venture
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > Researc...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, April 25, 2008
Researcher finds new way to hack Oracle database


Security researcher David Litchfield has released technical details of a new type of attack that could give a hacker access to an Oracle database.

Called a lateral SQL injection, the attack could be used to gain database administrator privileges on an Oracle server in order to change or delete data or even install software, Litchfield said in an interview on Thursday.

Litchfield first disclosed this type of attack at the Black Hat Washington conference last February, but on Thursday he published a paper with technical details.

In a SQL injection, attackers create specially crafted search terms that trick the database into running SQL commands. Previously, security experts thought that SQL injections would work only if the attacker was inputting character strings into the database, but Litchfield has shown that the attack can work using new types of data, known as date and number data types.

Litchfield's attack targets the Procedural Language/SQL programming language used by Oracle developers.

Oracle did not return so far a comment.


Previous
Next
Dell to factory-install Windows XP after June 30        All News        Pioneer and Matsushita Reach Basic Agreement on PDP Business
Dell to factory-install Windows XP after June 30     General Computing News      Microsoft Leaves MSN Music Subscribers in Cold

Source Link Get RSS feed Easy Print E-Mail this Message

Related News
Samsung and Oracle Provide the Engine for Enterprises to Mobilize Their Business in the Cloud
Oracle To Kill Java Plug-in For Browsers
Oracle SettleS FTC Charges It Deceived Consumers About Java
Oracle Breakthrough SPARC M7 Processor and Systems Design
Oracle Unveils New Services, Layouts Java's Future
Google Loses Appeal In Case Against Oracle
Oracle Extends Enterprise Cloud Portfolio
Oracle, SAP Settle Lawsuit
Oracle's Ellison Steps Down
Oracle To Buy Micros Systems
Oracle Accelerates Its Databases
Oracle Wins Appeal In Legal Battle With Google

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2016 - All rights reserved -
Privacy policy - Contact Us .