Oracle Database Create Database Link Lets Remote Authenticated Users Crash the Database
Categorie: Vulnerability Posted: 2005-01-20 by ReCall Views: 336 Source: Click here
Current Rating: Not rated
Details
Description: A buffer overflow was reported in the Oracle Database in the Create Database link. A remote authenticated user can cause the database to crash.
Alexander Kornbrust from Red-Database-Security reported that a remote authenticated user with CONNECT privileges and the ability to create a private database link can send a specially crafted connect string to crash the target database server.