VULHUB ™

Oracle 9i includes support for the ANSI 'outer join' syntax in SQL database queries. It has been reported that a security vulnerability exists in the implementation of this feature. According to reports, queries containing 'outer joins' can bypass database access controls. It may be possible for users to retrieve data that should not be accessible to them, such as the password hashes of other database users. The possible existence of this sort of vulnerability brings to light questions about the solidity of the underlying security model.

Oracle 9i includes support for the ANSI 'outer join' syntax in SQL database queries. It has been reported that a security vulnerability exists in the implementation of this feature. According to reports, queries containing 'outer joins' can bypass database access controls. It may be possible for users to retrieve data that should not be accessible to them, such as the password hashes of other database users. The possible existence of this sort of vulnerability brings to light questions about the solidity of the underlying security model.