[20354] in bugtraq
Re: Oracle8 denial of service (fwd)
daemon@ATHENA.MIT.EDU (Stephen Oberther)
Sat Apr 21 03:48:45 2001
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.LNX.4.30.0104201012320.4438-100000@quake.cs.fsu.edu>
Date: Fri, 20 Apr 2001 10:12:47 -0400
Reply-To: Stephen Oberther <oberther@CS.FSU.EDU>
From: Stephen Oberther <oberther@CS.FSU.EDU>
To: BUGTRAQ@SECURITYFOCUS.COM
> Oracle 8 servers running Windows NT 4.0 (SP6) and does not require any
> authentication credentials to succeed. I have not tried it on any other versions
> or platforms.
This works on Oracle 8 running on Solaris 8 as well. No credentials
needed to do the name lookup either it just eats up a processor. Good
thing it isn't threaded.
--Steve
/------------------------------------------------------------------------\
\ Stephen Oberther oberther@cs.fsu.edu /
/ Network and Systems Administrator soberther@admin.fsu.edu \
\ FO&M Department /
/ Florida State University Office: 102 Mendenhall \
\ Office Phone: 644-1866 /
/ Pager: 657-9069 \
\ http://www.cs.fsu.edu/~oberther /
/------------------------------------------------------------------------\
