bugTiger UNIX security tool - Bugs: bug #6628, Check_oracle test

 
 

bug #6628: Check_oracle test

Submitter:  Javier Fernandez-Sanguino Peña <jfs>
Submitted:  Tue 18 Nov 2003 02:15:24 PM UTC
 
Category:  Security check modules Severity:  1 - Wishlist
Item Group:  Feature Request Status:  None
Privacy:  Public Assigned to:  jfs
Open/Closed:  Open Operating System:  None
* Mandatory Fields

Add a New Comment (Rich Markup)
   

Comment Type & Canned Response:
       

 

Tue 18 Nov 2003 02:15:24 PM UTC, original submission:  

A 'check_oracle' script could be included in order to test the security of a Oracle database installed locally. Relevant sources of information include Oracle's as well as the following Securityfocus articles:
http://www.securityfocus.com/infocus/1689
http://www.securityfocus.com/infocus/1522

The script would need to send SQL queries and parse the SQL results. Since the potential for disaster is there SQL queries should be very tight (as few parameters as possible)

Sample SQL queries include:
http://www.pentest-limited.com/scanner.sql
and
http://www.petefinnigan.com/papers/audit.sql

Javier Fernandez-Sanguino Peña <jfs>
Project Administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

 

 

 

No changes have been made to this item

Back to the top


Powered by Savane 3.9