Oracle database passwords cracked

A researcher with AppSec Inc. demonstrated a method for exploiting cryptographic vulnerabilities in the authentication protocol used for Oracle databases, which allows attackers to crack the passwords using a brute force attack. Oracle has released a fix but it's a new, incompatible version of the protocol. The current version is still vulnerable. Read more about it here:

http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-easily-cracks-oracle-database-passwords.html

Read Next