This post seems to have slipped under the radar and is another example of SYSDBA privilege escalation.
http://www.pythian.com/blogs/388/exploiting-sysdba-invoker-rights-using-trigger-on-database
There are a number of other internal privilege escalations in the RDBMS which use similar principles…more to come on this..
Archive for June, 2008
Sysdba privilege escalation
Archives
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- August 2009
- July 2009
- April 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- January 2008
- December 2007
- October 2007
- August 2007
- July 2007
- May 2007
- April 2007
- March 2007
- February 2007
