Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others

Hi!

I've just released the working exploit for CTXSYS.DRVXTABC.CREATE_TABLES

injection on Oracle DB 9i/10g (CVE-2009-1991)

In particular,

Classic SQL injection:

<a href="http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tables.sql">http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tables.sql</a>

Cursor injection:

<a href="http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tablesV2.sql">http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tablesV2.sql</a>

Into the site you can find exploits for COMPRESSWORKSPACETREE,

REMOVEWORKSPACE and MERGEWORKSPACE injections (SYS.LT) too.

Regards,

--

Andrea "bunker" Purificato

Ethical Hacker @ Unidata S.p.A.

<a href="http://rawlab.mindcreations.com/">http://rawlab.mindcreations.com</a>

<a href="http://packetstormsecurity.org/0911-exploits/sys-lt-mergeworkspaceV2.sql.txt">http://packetstormsecurity.org/0911-exploits/sys-lt-mergeworkspaceV2.sql.txt</a>

<a href="http://packetstormsecurity.org/0911-exploits/sys-lt-removeworkspaceV2.sql.txt">http://packetstormsecurity.org/0911-exploits/sys-lt-removeworkspaceV2.sql.txt</a>

<a href="http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tablesV2.sql.txt">http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tablesV2.sql.txt</a>

<a href="http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tables.sql.txt">http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tables.sql.txt</a>

<a href="http://packetstormsecurity.org/0911-exploits/sys-lt-compressworkspacetreeV2.sql.txt">http://packetstormsecurity.org/0911-exploits/sys-lt-compressworkspacetreeV2.sql.txt</a>