[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [Full-disclosure] CVE-2009-1979 (Oracle RDBMS)
From:       Dennis Yurichev <dennis () conus ! info>
Date:       2009-10-30 10:32:09
Message-ID: 4AEAC0A9.2060308 () conus ! info
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi.

This vulnerability was ranked 10.0 (for Windows) in CPUoct2009 and
related to improper AUTH_SESSKEY parameter length validation.

http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html

Executable + source code attached.


- --
http://blogs.conus.info
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkrqwKkACgkQ1YPmFmJG++MnOACdGkO2KBaozIaLfwfbcwQrGZ9a
8B4AoLDfGrYatqKnemdd0jNWBeZAZXgJ
=FkPd
-----END PGP SIGNATURE-----

["CVE-2009-1979.zip" (application/x-zip-compressed)]
["CVE-2009-1979.zip.sig" (application/octet-stream)]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]