Breakable Oracle

Oracle security is a funny thing. Take this alert from red-database for example: By specifing a special value for the parameter desname Oracle Reports can overwrite any file on the application server. […] History 12-aug-2003 Oracle secalert was informed 26-sep-2003 Bug confirmed 15-apr-2005 Red-Database-Security informed Oracle secalert that this vulnerability will publish after CPU July … Continue reading Breakable Oracle