Joxean Koret - Database Security Paradise [Rooted CON 2011]
Report
Share
•3 likes•2,030 views
![Security in Databases ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-2-2048.jpg?cb=1668622670)
![Focus of the talk ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-3-2048.jpg?cb=1668622670)
![Steps in Vulnerability Discovery ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-4-2048.jpg?cb=1668622670)
![Stupid vulnerabilities ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-7-2048.jpg?cb=1668622670)
![Unidata's SIGUSR2 bug ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-9-2048.jpg?cb=1668622670)
![Bugs from the past: Ingres ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-11-2048.jpg?cb=1668622670)
![verifydb multiple stack overflows ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-13-2048.jpg?cb=1668622670)
![wakeup stack overflow ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-14-2048.jpg?cb=1668622670)
![II_INSTALLATION environment variable ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-15-2048.jpg?cb=1668622670)
![MySQL: Client Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-18-2048.jpg?cb=1668622670)
![MySQL Client Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-19-2048.jpg?cb=1668622670)
![MySQL Client Tools Bugs ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-24-2048.jpg?cb=1668622670)
![IBM DB2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-26-2048.jpg?cb=1668622670)
![IBM DB2 Escalation of Privileges ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-28-2048.jpg?cb=1668622670)
![IBM DB2 Escalation of Privileges ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-29-2048.jpg?cb=1668622670)
![IBM DB2 Escalation of Privileges ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-30-2048.jpg?cb=1668622670)
![IBM DB2 Escation of Privileges ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-31-2048.jpg?cb=1668622670)
![Oracle Database Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-33-2048.jpg?cb=1668622670)
![CVE-2008-2613 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-34-2048.jpg?cb=1668622670)
![CVE-2008-2613 Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-35-2048.jpg?cb=1668622670)
![Informix Dynamic Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-37-2048.jpg?cb=1668622670)
![onedcu informix to root EoP ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-38-2048.jpg?cb=1668622670)
![Function ifmx_dlopen ,[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-39-2048.jpg?cb=1668622670)
![Path to gl_init_glu ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-41-2048.jpg?cb=1668622670)
![Initgls function ,[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-42-2048.jpg?cb=1668622670)
![onedcu suid root EoP ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-43-2048.jpg?cb=1668622670)
![Informix EoP ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-44-2048.jpg?cb=1668622670)
![Remote Vulnerabilities ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-46-2048.jpg?cb=1668622670)
![Rocket U2 Uni RPC Service Remote Code Execution Vulnerability ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-48-2048.jpg?cb=1668622670)
![ZDI-10-294 ,[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-49-2048.jpg?cb=1668622670)
![ZDI-10-294 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-50-2048.jpg?cb=1668622670)
![ZDI-10-294 ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-51-2048.jpg?cb=1668622670)
![IBM DB2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-53-2048.jpg?cb=1668622670)
![IBM DB2 Remote DOS ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-54-2048.jpg?cb=1668622670)
![IBM DB2 Remote DOS ,[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-55-2048.jpg?cb=1668622670)
![IBM DB2 'repeat' Heap Overflow ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-56-2048.jpg?cb=1668622670)
![IBM DB2 Notes ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-57-2048.jpg?cb=1668622670)
![Informix Dynamic Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-59-2048.jpg?cb=1668622670)
![Informix Remote DOS POC ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-60-2048.jpg?cb=1668622670)
![Informix Remote DOS ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-61-2048.jpg?cb=1668622670)
![SET Environment Stack Overflow ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-62-2048.jpg?cb=1668622670)
![POC ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-63-2048.jpg?cb=1668622670)
![Informix start_onpload RCI ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-64-2048.jpg?cb=1668622670)
![Informix start_onpload RCE ,[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-66-2048.jpg?cb=1668622670)
![Informix Notes ,[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-67-2048.jpg?cb=1668622670)
![Conclussions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/joxean-koret-databasesecurityrooted2011-110308022702-phpapp01/75/joxean-koret-database-security-paradise-rooted-con-2011-68-2048.jpg?cb=1668622670)
Joxean Koret - Database Security Paradise [Rooted CON 2011]
•3 likes•2,030 views
Report
Share
Download to read offline
Recommended
![Eloi Sanfelix - Hardware security: Side Channel Attacks [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/esanfelix-sidechannelattacks-110307125844-phpapp01-thumbnail.jpg?width=384&fit=bounds)
More Related Content
What's hot
![Laura Garcia - Shodan API and Coding Skills [rooted2019]](https://cdn.slidesharecdn.com/ss_thumbnails/shondaapiandcodingskillsrootedcon2019-190403190029-thumbnail.jpg?width=384&fit=bounds)
What's hot(20)
![Laura Garcia - Shodan API and Coding Skills [rooted2019]](https://cdn.slidesharecdn.com/ss_thumbnails/shondaapiandcodingskillsrootedcon2019-190403190029-thumbnail.jpg?width=768&fit=bounds)
Viewers also liked
![Marisol Salanova - Seguridad informática y cibersexo [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/marisolsalanova-seguridadinfycibersexo-110307130750-phpapp01-thumbnail.jpg?width=384&fit=bounds)
![José Selvi - Unprivileged Network Post-Exploitation [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/jose-selvi-multirelay-110307130259-phpapp01-thumbnail.jpg?width=384&fit=bounds)
![José Ramón Palanco - NoSQL Security [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/rooted-nosqlsecurity-110307132650-phpapp02-thumbnail.jpg?width=384&fit=bounds)
Viewers also liked(19)
![Marisol Salanova - Seguridad informática y cibersexo [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/marisolsalanova-seguridadinfycibersexo-110307130750-phpapp01-thumbnail.jpg?width=768&fit=bounds)
![José Selvi - Unprivileged Network Post-Exploitation [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/jose-selvi-multirelay-110307130259-phpapp01-thumbnail.jpg?width=768&fit=bounds)
![José Ramón Palanco - NoSQL Security [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/rooted-nosqlsecurity-110307132650-phpapp02-thumbnail.jpg?width=768&fit=bounds)
![Gabriel Gonzalez - Man-In-Remote: PKCS11 for fun and non-profit [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/gabrielgonzalez-maninremote-rootedcon-110307125915-phpapp02-thumbnail.jpg?width=768&fit=bounds)
![Rubén Santamarta - SCADA Trojans: Attacking the Grid [Rooted CON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/scadatrojansrubenrootedcon-110322163433-phpapp02-thumbnail.jpg?width=768&fit=bounds)
![{RootedPanel] Grupo de Hackers Históricos: Apòstols [RootedCON 2010]](https://cdn.slidesharecdn.com/ss_thumbnails/rootedpanelgrupohackers-100328041459-phpapp01-thumbnail.jpg?width=768&fit=bounds)
![Antonio Ramos - La asimetría en el mercado de la seguridad [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/antonioramos-asimetriaseguridad-110307125108-phpapp02-thumbnail.jpg?width=768&fit=bounds)
![Alberto García de Dios - Virus, el arte no debería ser negocio [Rooted CON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/agdedios-viruselartedelagunos-110308060718-phpapp02-thumbnail.jpg?width=768&fit=bounds)
![Blueliv - Information Tracking with Optos [Rooted CON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/ponenciarooted2011-optos-slideshare-110321152840-phpapp01-thumbnail.jpg?width=768&fit=bounds)
![David López Paz - Global Warfare [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/davidlopezpaz-globalwarfare-110307125717-phpapp02-thumbnail.jpg?width=768&fit=bounds)
![Vins Villaplana - Seguridad en capa de enlace [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/vinsvilaplana-seguridadencapadeenlace-110307124644-phpapp01-thumbnail.jpg?width=768&fit=bounds)
![Hernan Ochoa - WCE Internals [RootedCON 2011]](https://cdn.slidesharecdn.com/ss_thumbnails/wceinternalsrootedcon2011ampliasecurity-110307133648-phpapp01-thumbnail.jpg?width=768&fit=bounds)
Similar to Joxean Koret - Database Security Paradise [Rooted CON 2011]
Similar to Joxean Koret - Database Security Paradise [Rooted CON 2011](20)
More from RootedCON
More from RootedCON(20)
Joxean Koret - Database Security Paradise [Rooted CON 2011]
- 1. Database's Security Paradise Joxean Koret
- 5. Local Vulnerabilities in Database Software
- 6. Unidata
- 8. Send SIGUSR2 signal to any process
- 10. Ingres
- 12. Welcome to '70s!
- 17. MySQL Client
- 20. Stupid bug #1
- 21. Stupid bug #2
- 22. Stupid bug #2
- 23. (Remote) Stupid bug #3
- 25. IBM DB2
- 32. Oracle
- 36. Informix
- 40. Path to ifmx_dlopen function
- 47. Unidata
- 52. IBM DB2
- 58. Informix
- 69. Search for bugs ;)