江湖人称“Oracle漏洞猎手”的David Litchfield在去年6月11日发现过Oracle一个疑似后门的严重漏洞CVE-2015-0393。
日前Litchfield向我们透漏了一些漏洞细节：
在该漏洞中，Oracle数据库内的PUBLIC角色在DUAL表中被授予了索引权限，也就是说任何用户都可以在该表创建索引。
DUAL表是SYS用户下的一张内部表，所有用户都可以使用DUAL名称访问，无论什么时候这个表总是存在。在DUAL表中创建了基于函数的索引后，黑客将暂时获得SYS用户权限（SYSDBA），可执行任意SQL语句进而尝试控制整个服务器。如果存在这个漏洞的电子商务套件可以从外网远程访问的话，攻击者只要有PUBLIC角色（不需要用户密码），就可以跟进后续一大波的漏洞攻击。
Litchfield觉得PUBLIC角色是不应该拥有DUAL表的索引权限，据此他判断出这个漏洞可能是由于代码编写出现的bug或者是开发人员刻意留下的后门。
漏洞进展
在一次给客户进行安全检测的过程中，Litchfield发现了这个漏洞。
由于该漏洞可以直接获得SYSDBA权限，他最开始以为这是某人留的后门，但后来与客户交流后，客户的技术人员开始调查该“后门”事件，最后发现该权限授予漏洞是在Oracle电子商务套件安装时就有的。
Litchfield承认从Oracle得知，官方技术人员检查了该漏洞，但却表示并没有找到该权限授予漏洞出现的时间和漏洞成因。Oracle在严重补丁升级时表示，这个漏洞并非远程执行。Oracle给其评级为6分（满分10分）。
Oracle官方表示，当前漏洞已经被修复。
其他重要补丁升级情况
在Java平台上，Oracle为19个漏洞打了补丁，其中有14个漏洞可以远程利用，包括部分严重级别很高的漏洞。然而，Oracle表示Java漏洞的数量会呈递减趋势，这是由历史数据验证过的。
同时，Oracle还修补了八个最重要的Oracle数据服务器的漏洞，其中没有远程利用的漏洞，也没有在客户端利用的。其中唯一的高危漏洞，是Oracle Sun Systems的Fujitsu M10-1, M10-4 and M10-4S servers。
117.27.249.1段 18000元/月 500G省接口节点防护基本无敌模式！
117.27.250.1段 20000元/月 500G省接口节点防护+超强CC无敌策略 全国攻击耐我何！
117.27.249.1 117.27.250.1
117.27.249.2 117.27.250.2
117.27.249.3 117.27.250.3
117.27.249.4 117.27.250.4
117.27.249.5 117.27.250.5
117.27.249.6 117.27.250.6
117.27.249.7 117.27.250.7
117.27.249.8 117.27.250.8
117.27.249.9 117.27.250.9
117.27.249.10 117.27.250.10
117.27.249.11 117.27.250.11
117.27.249.12 117.27.250.12
117.27.249.13 117.27.250.13
117.27.249.14 117.27.250.14
117.27.249.15 117.27.250.15
117.27.249.16 117.27.250.16
117.27.249.17 117.27.250.17
117.27.249.18 117.27.250.18
117.27.249.19 117.27.250.19
117.27.249.20 117.27.250.20
117.27.249.21 117.27.250.21
117.27.249.22 117.27.250.22
117.27.249.23 117.27.250.23
117.27.249.24 117.27.250.24
117.27.249.25 117.27.250.25
117.27.249.26 117.27.250.26
117.27.249.27 117.27.250.27
117.27.249.28 117.27.250.28
117.27.249.29 117.27.250.29
117.27.249.30 117.27.250.30
117.27.249.31 117.27.250.31
117.27.249.32 117.27.250.32
117.27.249.33 117.27.250.33
117.27.249.34 117.27.250.34
117.27.249.35 117.27.250.35
117.27.249.36 117.27.250.36
117.27.249.37 117.27.250.37
117.27.249.38 117.27.250.38
117.27.249.39 117.27.250.39
117.27.249.40 117.27.250.40
117.27.249.41 117.27.250.41
117.27.249.42 117.27.250.42
117.27.249.43 117.27.250.43
117.27.249.44 117.27.250.44
117.27.249.45 117.27.250.45
117.27.249.46 117.27.250.46
117.27.249.47 117.27.250.47
117.27.249.48 117.27.250.48
117.27.249.49 117.27.250.49
117.27.249.50 117.27.250.50
117.27.249.51 117.27.250.51
117.27.249.52 117.27.250.52
117.27.249.53 117.27.250.53
117.27.249.54 117.27.250.54
117.27.249.55 117.27.250.55
117.27.249.56 117.27.250.56
117.27.249.57 117.27.250.57
117.27.249.58 117.27.250.58
117.27.249.59 117.27.250.59
117.27.249.60 117.27.250.60
117.27.249.61 117.27.250.61
117.27.249.62 117.27.250.62
117.27.249.63 117.27.250.63
117.27.249.64 117.27.250.64
117.27.249.65 117.27.250.65
117.27.249.66 117.27.250.66
117.27.249.67 117.27.250.67
117.27.249.68 117.27.250.68
117.27.249.69 117.27.250.69
117.27.249.70 117.27.250.70
117.27.249.71 117.27.250.71
117.27.249.72 117.27.250.72
117.27.249.73 117.27.250.73
117.27.249.74 117.27.250.74
117.27.249.75 117.27.250.75
117.27.249.76 117.27.250.76
117.27.249.77 117.27.250.77
117.27.249.78 117.27.250.78
117.27.249.79 117.27.250.79
117.27.249.80 117.27.250.80
117.27.249.81 117.27.250.81
117.27.249.82 117.27.250.82
117.27.249.83 117.27.250.83
117.27.249.84 117.27.250.84
117.27.249.85 117.27.250.85
117.27.249.86 117.27.250.86
117.27.249.87 117.27.250.87
117.27.249.88 117.27.250.88
117.27.249.89 117.27.250.89
117.27.249.90 117.27.250.90
117.27.249.91 117.27.250.91
117.27.249.92 117.27.250.92
117.27.249.93 117.27.250.93
117.27.249.94 117.27.250.94
117.27.249.95 117.27.250.95
117.27.249.96 117.27.250.96
117.27.249.97 117.27.250.97
117.27.249.98 117.27.250.98
117.27.249.99 117.27.250.99
117.27.249.100 117.27.250.100
117.27.249.101 117.27.250.101
117.27.249.102 117.27.250.102
117.27.249.103 117.27.250.103
117.27.249.104 117.27.250.104
117.27.249.105 117.27.250.105
117.27.249.106 117.27.250.106
117.27.249.107 117.27.250.107
117.27.249.108 117.27.250.108
117.27.249.109 117.27.250.109
117.27.249.110 117.27.250.110
117.27.249.111 117.27.250.111
117.27.249.112 117.27.250.112
117.27.249.113 117.27.250.113
117.27.249.114 117.27.250.114
117.27.249.115 117.27.250.115
117.27.249.116 117.27.250.116
117.27.249.117 117.27.250.117
117.27.249.118 117.27.250.118
117.27.249.119 117.27.250.119
117.27.249.120 117.27.250.120
117.27.249.121 117.27.250.121
117.27.249.122 117.27.250.122
117.27.249.123 117.27.250.123
117.27.249.124 117.27.250.124
117.27.249.125 117.27.250.125
117.27.249.126 117.27.250.126
117.27.249.127 117.27.250.127
117.27.249.128 117.27.250.128
117.27.249.129 117.27.250.129
117.27.249.130 117.27.250.130
117.27.249.131 117.27.250.131
117.27.249.132 117.27.250.132
117.27.249.133 117.27.250.133
117.27.249.134 117.27.250.134
117.27.249.135 117.27.250.135
117.27.249.136 117.27.250.136
117.27.249.137 117.27.250.137
117.27.249.138 117.27.250.138
117.27.249.139 117.27.250.139
117.27.249.140 117.27.250.140
117.27.249.141 117.27.250.141
117.27.249.142 117.27.250.142
117.27.249.143 117.27.250.143
117.27.249.144 117.27.250.144
117.27.249.145 117.27.250.145
117.27.249.146 117.27.250.146
117.27.249.147 117.27.250.147
117.27.249.148 117.27.250.148
117.27.249.149 117.27.250.149
117.27.249.150 117.27.250.150
117.27.249.151 117.27.250.151
117.27.249.152 117.27.250.152
117.27.249.153 117.27.250.153
117.27.249.154 117.27.250.154
117.27.249.155 117.27.250.155
117.27.249.156 117.27.250.156
117.27.249.157 117.27.250.157
117.27.249.158 117.27.250.158
117.27.249.159 117.27.250.159
117.27.249.160 117.27.250.160
117.27.249.161 117.27.250.161
117.27.249.162 117.27.250.162
117.27.249.163 117.27.250.163
117.27.249.164 117.27.250.164
117.27.249.165 117.27.250.165
117.27.249.166 117.27.250.166
117.27.249.167 117.27.250.167
117.27.249.168 117.27.250.168
117.27.249.169 117.27.250.169
117.27.249.170 117.27.250.170
117.27.249.171 117.27.250.171
117.27.249.172 117.27.250.172
117.27.249.173 117.27.250.173
117.27.249.174 117.27.250.174
117.27.249.175 117.27.250.175
117.27.249.176 117.27.250.176
117.27.249.177 117.27.250.177
117.27.249.178 117.27.250.178
117.27.249.179 117.27.250.179
117.27.249.180 117.27.250.180
117.27.249.181 117.27.250.181
117.27.249.182 117.27.250.182
117.27.249.183 117.27.250.183
117.27.249.184 117.27.250.184
117.27.249.185 117.27.250.185
117.27.249.186 117.27.250.186
117.27.249.187 117.27.250.187
117.27.249.188 117.27.250.188
117.27.249.189 117.27.250.189
117.27.249.190 117.27.250.190
117.27.249.191 117.27.250.191
117.27.249.192 117.27.250.192
117.27.249.193 117.27.250.193
117.27.249.194 117.27.250.194
117.27.249.195 117.27.250.195
117.27.249.196 117.27.250.196
117.27.249.197 117.27.250.197
117.27.249.198 117.27.250.198
117.27.249.199 117.27.250.199
117.27.249.200 117.27.250.200
117.27.249.201 117.27.250.201
117.27.249.202 117.27.250.202
117.27.249.203 117.27.250.203
117.27.249.204 117.27.250.204
117.27.249.205 117.27.250.205
117.27.249.206 117.27.250.206
117.27.249.207 117.27.250.207
117.27.249.208 117.27.250.208
117.27.249.209 117.27.250.209
117.27.249.210 117.27.250.210
117.27.249.211 117.27.250.211
117.27.249.212 117.27.250.212
117.27.249.213 117.27.250.213
117.27.249.214 117.27.250.214
117.27.249.215 117.27.250.215
117.27.249.216 117.27.250.216
117.27.249.217 117.27.250.217
117.27.249.218 117.27.250.218
117.27.249.219 117.27.250.219
117.27.249.220 117.27.250.220
117.27.249.221 117.27.250.221
117.27.249.222 117.27.250.222
117.27.249.223 117.27.250.223
117.27.249.224 117.27.250.224
117.27.249.225 117.27.250.225
117.27.249.226 117.27.250.226
117.27.249.227 117.27.250.227
117.27.249.228 117.27.250.228
117.27.249.229 117.27.250.229
117.27.249.230 117.27.250.230
117.27.249.231 117.27.250.231
117.27.249.232 117.27.250.232
117.27.249.233 117.27.250.233
117.27.249.234 117.27.250.234
117.27.249.235 117.27.250.235
117.27.249.236 117.27.250.236
117.27.249.237 117.27.250.237
117.27.249.238 117.27.250.238
117.27.249.239 117.27.250.239
117.27.249.240 117.27.250.240
117.27.249.241 117.27.250.241
117.27.249.242 117.27.250.242
117.27.249.243 117.27.250.243
117.27.249.244 117.27.250.244
117.27.249.245 117.27.250.245
117.27.249.246 117.27.250.246
117.27.249.247 117.27.250.247
117.27.249.248 117.27.250.248
117.27.249.249 117.27.250.249
117.27.249.250 117.27.250.250
117.27.249.251 117.27.250.251
117.27.249.252 117.27.250.252
117.27.249.253 117.27.250.253
117.27.249.254 117.27.250.254
117.27.249.255 117.27.250.255