bugTiger UNIX security tool - Bugs: bug #6628, Check_oracle test

 
 

bug #6628: Check_oracle test

Submitted by:  Javier Fernandez-Sanguino Peña <jfs>
Submitted on:  Tue 18 Nov 2003 02:15:24 PM UTC  
 
Category: Security check modulesSeverity: 1 - Wishlist
Item Group: Feature RequestStatus: None
Privacy: PublicAssigned to: Javier Fernandez-Sanguino Peña <jfs>
Open/Closed: OpenOperating System: None

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 18 Nov 2003 02:15:24 PM UTC, original submission:

A 'check_oracle' script could be included in order to test the security of a Oracle database installed locally. Relevant sources of information include Oracle's as well as the following Securityfocus articles:
http://www.securityfocus.com/infocus/1689
http://www.securityfocus.com/infocus/1522

The script would need to send SQL queries and parse the SQL results. Since the potential for disaster is there SQL queries should be very tight (as few parameters as possible)

Sample SQL queries include:
http://www.pentest-limited.com/scanner.sql
and
http://www.petefinnigan.com/papers/audit.sql

Javier Fernandez-Sanguino Peña <jfs>
Project AdministratorIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

No Changes Have Been Made to This Item

Back to the top


Powered by Savane 3.1-cleanup