Re: Oracle 9i on Windows 2003 -- Vulnerability Question

From: David Litchfield <dwlitchfield@xxxxxxxxxxx>
To: jkstill@xxxxxxxxx
Date: Fri, 1 Dec 2006 20:54:53 +0000 (GMT)

Hi Jared,
  >>On 12/1/06, David Litchfield <dwlitchfield@xxxxxxxxxxx> wrote:
>>p.s. The NULL Dacl problems are not Microsoft's fault before anyone blames 
>>them...
  >subinacle.exe is a very powerful tool for reporting on ACLS 
>and setting them to appropriate values. 
  >It can be found at MS support site.

  Unfortunately, when a new connection is made new threads are created with a 
NULL dacl so subinacl.exe unfortunately can't help here. Besides, if the main 
Oracle process and thread objects didn't have a NULL dacl I wonder what would 
break :/
  Cheers,
David

 Send instant messages to your online friends http://uk.messenger.yahoo.com

References:

Re: Oracle 9i on Windows 2003 -- Vulnerability Question
From: Jared Still

Re: Oracle 9i on Windows 2003 -- Vulnerability Question

Other related posts: