Computer Crime Research Center

etc/word.jpg

Worn targets Oracle

Date: November 03, 2005
Source: PC WORLD
By: Stephen Lawson

A worm that can attack Oracle databases has been posted to a security-related Internet mailing list, raising the specter of possible future worms with dangerous payloads.

Code for the worm was posted Monday by an anonymous person on the Full-disclosure mailing list who used the subject line "Trick or treat Larry." It is a "proof of concept" worm with a harmless payload, but similar worms could automatically spread among databases and wreak havoc, security researchers said Wednesday.

"Trick or treat" is the first Oracle worm that security researcher Alexander Kornbrust has seen "in the wild," outside a lab setting. Hackers who target Oracle databases normally aim at a single database and steal information from it, said Kornbrust, of Red-Database-Security GmbH, in Neunkirchen, Germany. A worm could automate the process of getting into many databases within a company or on the Internet, he said. Some enterprises use thousands of Oracle databases.
Add comment  Email to a Friend

Discussion is closed - view comments archieve
2005-11-19 09:13:58 - good arup gupta
2005-11-08 18:36:16 - piratage jfglgm
2005-11-08 18:35:30 - piratage des mot de passe ayoub_haraka
Total 3 comments
Copyright © 2001-2024 Computer Crime Research Center
CCRC logo