Worn targets Oracle

Date: November 03, 2005
Source: PC WORLD
By: Stephen Lawson

A worm that can attack Oracle databases has been posted to a security-related Internet mailing list, raising the specter of possible future worms with dangerous payloads.

Code for the worm was posted Monday by an anonymous person on the Full-disclosure mailing list who used the subject line "Trick or treat Larry." It is a "proof of concept" worm with a harmless payload, but similar worms could automatically spread among databases and wreak havoc, security researchers said Wednesday.

"Trick or treat" is the first Oracle worm that security researcher Alexander Kornbrust has seen "in the wild," outside a lab setting. Hackers who target Oracle databases normally aim at a single database and steal information from it, said Kornbrust, of Red-Database-Security GmbH, in Neunkirchen, Germany. A worm could automate the process of getting into many databases within a company or on the Internet, he said. Some enterprises use thousands of Oracle databases.
Original article

---

Add comment  Email to a Friend

Discussion is closed - view comments archieve

2005-11-19 09:13:58 - good arup gupta

2005-11-08 18:36:16 - piratage jfglgm

2005-11-08 18:35:30 - piratage des mot de passe ayoub_haraka

Total 3 comments