论文部分内容阅读
eWEEK实验室的Openhack电子商务站点的Oracle 8i数据库服务器被攻击了。这次被攻击揭示出此数据库的4个弱点,其中包括一个可选组件问题。而在此之前这些弱点并没有被发现。操作这次攻击的是西班牙安全委员会的Lluis Mora。Mora还摧毁过eWEEK实验室以前的安全测试站点,他的攻击是系统化的,并使用了尖端技术。为了找到Akopia公司的MiniVend storefront package的弱点,Mora花费了40个小时,他找到了三个弱点,其中一个提供了通向内部网的路径,
Oracle 8i database server at eWEEK Lab’s Openhack e-commerce site was attacked. This attack revealed four weaknesses in this database, including an optional component issue. Before that these weaknesses have not been found. Lluis Mora, the Spanish security commission, who operated this attack. Mora also destroyed previous security testing sites at eWEEK Labs, where his attacks were systematic and used state-of-the-art technology. To find out about the weaknesses of Akopia’s MiniVend storefront package, Mora spent 40 hours and found three weaknesses, one of which provided a path to the intranet,