Joxean Koret - Database Security Paradise [Rooted CON 2011]

Database's Security Paradise Joxean Koret

Security in Databases ,[object Object],[object Object],[object Object],[object Object]

Focus of the talk ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Steps in Vulnerability Discovery ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Local Vulnerabilities in Database Software

Stupid vulnerabilities ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Send SIGUSR2 signal to any process

Unidata's SIGUSR2 bug ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Bugs from the past: Ingres ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

verifydb multiple stack overflows ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

wakeup stack overflow ,[object Object],[object Object],[object Object],[object Object],[object Object]

II_INSTALLATION environment variable ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

MySQL: Client Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

MySQL Client Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

MySQL Client Tools Bugs ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IBM DB2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IBM DB2 Escalation of Privileges ,[object Object],[object Object],[object Object],[object Object]

IBM DB2 Escalation of Privileges ,[object Object],[object Object],[object Object]

IBM DB2 Escalation of Privileges ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IBM DB2 Escation of Privileges ,[object Object],[object Object],[object Object],[object Object]

Oracle Database Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

CVE-2008-2613 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

CVE-2008-2613 Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Informix Dynamic Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

onedcu informix to root EoP ,[object Object],[object Object],[object Object],[object Object],[object Object]

Function ifmx_dlopen ,[object Object]

Path to gl_init_glu ,[object Object],[object Object],[object Object]

Initgls function ,[object Object]

onedcu suid root EoP ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Informix EoP ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Remote Vulnerabilities ,[object Object],[object Object],[object Object],[object Object]

Rocket U2 Uni RPC Service Remote Code Execution Vulnerability ,[object Object],[object Object],[object Object],[object Object],[object Object]

ZDI-10-294 ,[object Object],[object Object]

ZDI-10-294 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

ZDI-10-294 ,[object Object],[object Object],[object Object]

IBM DB2 Remote DOS ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IBM DB2 Remote DOS ,[object Object],[object Object],[object Object],[object Object],[object Object]

IBM DB2 'repeat' Heap Overflow ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IBM DB2 Notes ,[object Object],[object Object],[object Object]

Informix Dynamic Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Informix Remote DOS POC ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Informix Remote DOS ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SET Environment Stack Overflow ,[object Object],[object Object],[object Object]

POC ,[object Object],[object Object],[object Object],[object Object]

Informix start_onpload RCI ,[object Object],[object Object],[object Object],[object Object]

Informix start_onpload RCE ,[object Object],[object Object],[object Object],[object Object]

Informix Notes ,[object Object],[object Object],[object Object]

Conclussions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Joxean Koret - Database Security Paradise [Rooted CON 2011]

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (19)

Ähnlich wie Joxean Koret - Database Security Paradise [Rooted CON 2011]

Ähnlich wie Joxean Koret - Database Security Paradise [Rooted CON 2011] (20)

Mehr von RootedCON

Mehr von RootedCON (20)

Joxean Koret - Database Security Paradise [Rooted CON 2011]