Hackers use technologies of cracking Oracle databases

9th March 2007

NGS Software Company, specializing in the area of information security, warned of the emergence of a new type of hacker attacks, raising the danger of most common bugs in Oracle database programs, News.com reports. New type of cracking, that hackers use, allows one to get full control over the database server, having the minimum privileges. During the Black Hat conference NGS Software expert David Litchfield reported that they already have samples of hackersâ€™ code that uses main bugs of SQL for cracking the Oracle database. By means of new technology of cracking, any user connected to the database can easily make advantage of these bugs. Oracle, in turn, said that they are aware of a new type of hacker attacks, and recommends users to patch all known vulnerabilities. The Litchfield thinks Oracle should pay special attention to new hackers technologies and refuse using of the system of privileges in the future as a tool to reduce the risk of vulnerabilities. The expert believes that only due to this reason now many Oracle customers are not willing to install the necessary patches.