1
Database Vulnerabilities Go Unpatched CVE ( 網網網網網網網網網網 ) 網網網 DBMS 網網網網網網網 : 129 90 54 35 5 4 0 50 100 150 Oracle M ySQL DB2 Inform ix Sybase M SSQL Jan 2006 ~ June 2008 DBMS 漏漏漏漏 漏漏漏漏 2/3 漏 Oracle DB 漏漏漏漏 漏漏漏， Why ? DB 網網網網網網 網網網網網網網網 網網網網網網網網網網網網 DBMS 網網

Database Vulnerabilities Go Unpatched

  • Upload
    bina

  • View
    38

  • Download
    2

Embed Size (px)

DESCRIPTION

Database Vulnerabilities Go Unpatched. DB 需要停工時間 導致企業作業中斷 資料庫提供者不再支援舊的 DBMS 版本. 超過半數 2/3 的 Oracle DB 未即時修補漏洞， Why ?. Jan 2006 ~ June 2008 DBMS 漏洞報告. CVE ( 網路安全漏洞發佈组織 ) 發表之 DBMS 安全漏洞的數目 :. - PowerPoint PPT Presentation

Citation preview

Page 1: Database Vulnerabilities Go Unpatched

Database Vulnerabilities Go Unpatched

CVE ( 網路安全漏洞發佈组織 ) 發表之 DBMS 安全漏洞的數目 :

129

90

54

35

5

4

0 50 100 150

Oracle

MySQL

DB2

Informix

Sybase

MS SQL

Jan 2006 ~ June 2008 DBMS 漏洞報告超過半數 2/3 的 Oracle DB未即時修補漏洞， Why ?

DB 需要停工時間 導致企業作業中斷資料庫提供者不再支援舊的 DBMS 版本

An Analysis of Trends in Vulnerabilities of the NVD Database

An Analysis of Trends in Vulnerabilities of the NVD Database

Documents
SECURITY TRENDS & VULNERABILITIES REVIEW WEB APPLICATIONS … · SECURITY TRENDS & VULNERABILITIES REVIEW WEB APPLICATIONS ff2017fl Contents ... SECURITY TRENDS & VULNERABILITIES

SECURITY TRENDS & VULNERABILITIES REVIEW WEB APPLICATIONS … · SECURITY TRENDS & VULNERABILITIES REVIEW WEB APPLICATIONS ff2017fl Contents ... SECURITY TRENDS & VULNERABILITIES

Documents
Detection & prevention of vulnerabilities in web applications · 2020. 3. 20. · vulnerabilities. 1.1 Common Web Application Vulnerabilities The risk of web application vulnerabilities

Detection & prevention of vulnerabilities in web applications · 2020. 3. 20. · vulnerabilities. 1.1 Common Web Application Vulnerabilities The risk of web application vulnerabilities

Documents
Vulnerability & Security Assessment Report Election ... the national vulnerability database. The DS850 system contained at least seven vulnerabilities with the highest criticality

Vulnerability & Security Assessment Report Election ... the national vulnerability database. The DS850 system contained at least seven vulnerabilities with the highest criticality

Documents
Common Vulnerabilities and Exposures (CVE) Overview...–CVE IDs uniquely define vulnerabilities so that mitigations can be efficiently applied §A vulnerability database –CVE allows

Common Vulnerabilities and Exposures (CVE) Overview...–CVE IDs uniquely define vulnerabilities so that mitigations can be efficiently applied §A vulnerability database –CVE allows

Documents
Unpatched Systems: An Ethical Hacker's View

Unpatched Systems: An Ethical Hacker's View

Technology
FALCON PREVENT FOR HOME USE€¦ · Exploit blocking stops the execution and spread of threats via unpatched vulnerabilities Threat intelligence prevention blocks activities known

FALCON PREVENT FOR HOME USE€¦ · Exploit blocking stops the execution and spread of threats via unpatched vulnerabilities Threat intelligence prevention blocks activities known

Documents
(U) Hive 2.6.2 User's Guide - WikiLeaks · hived-mikrotik-mipsle-unpatched 235307 4f2d7d2e817684a21f2de8315c2d9eb3 hived-mikrotik-ppc-unpatched 175812 0806e6641cafe014266d30ee1d4b37ef

(U) Hive 2.6.2 User's Guide - WikiLeaks · hived-mikrotik-mipsle-unpatched 235307 4f2d7d2e817684a21f2de8315c2d9eb3 hived-mikrotik-ppc-unpatched 175812 0806e6641cafe014266d30ee1d4b37ef

Documents
Linux Vulnerabilities

Linux Vulnerabilities

Education
Ransomware is Here: What you can do about it?€¦ · An emerging category of malware, including the previously-mentioned SamSam, finds specific unpatched vulnerabilities to exploit

Ransomware is Here: What you can do about it?€¦ · An emerging category of malware, including the previously-mentioned SamSam, finds specific unpatched vulnerabilities to exploit

Documents
DOAG BEST OF 2020 - Oracle Security Services by Red ......Oracle Vulnerabilities 2020 Number of vulnerabilities in Oracle database increased again ! 144 findings in 2020 (2019: 27,

DOAG BEST OF 2020 - Oracle Security Services by Red ......Oracle Vulnerabilities 2020 Number of vulnerabilities in Oracle database increased again ! 144 findings in 2020 (2019: 27,

Documents
“Must Have” Features for Risk-Based Vulnerability ......unpatched software vulnerabilities. Q: Does your VM only look at unpatched vulnerabilities? How about the risk to your business

“Must Have” Features for Risk-Based Vulnerability ......unpatched software vulnerabilities. Q: Does your VM only look at unpatched vulnerabilities? How about the risk to your business

Documents
The State of the CISO - Optiv...Institute found 57% of data breaches stem from unpatched known vulnerabilities.1 Educating employees, simplifying infrastructure and aligning security

The State of the CISO - Optiv...Institute found 57% of data breaches stem from unpatched known vulnerabilities.1 Educating employees, simplifying infrastructure and aligning security

Documents
Predicting Vulnerable Software Components - uni-saarland.de · V ulnerability database V ulture Component New component Predictor Component Component Version archive maps vulnerabilities

Predicting Vulnerable Software Components - uni-saarland.de · V ulnerability database V ulture Component New component Predictor Component Component Version archive maps vulnerabilities

Documents
Source port vulnerabilities in .JP - static ... - DNS-OARC · Vulnerabilities suspected Heavy user exists. Vulnerabilities suspected Heavy user exists. Vulnerabilities suspected 25

Source port vulnerabilities in .JP - static ... - DNS-OARC · Vulnerabilities suspected Heavy user exists. Vulnerabilities suspected Heavy user exists. Vulnerabilities suspected 25

Documents
Oracle Security Services by Red-Database-Security GmbH - DOAG … · 2014-11-21 · Oracle Vulnerabilities Number of vulnerabilities in Oracle database increasing again ! 43 findings

Oracle Security Services by Red-Database-Security GmbH - DOAG … · 2014-11-21 · Oracle Vulnerabilities Number of vulnerabilities in Oracle database increasing again ! 43 findings

Documents
Ghost Patches: Faux Patches for Faux Vulnerabilities · 2017-04-03 · publicly disclosed vulnerabilities to exploit unpatched systems.' How misaligned incentives give hackers an

Ghost Patches: Faux Patches for Faux Vulnerabilities · 2017-04-03 · publicly disclosed vulnerabilities to exploit unpatched systems.' How misaligned incentives give hackers an

Documents
Internet banking safeguards vulnerabilities - 2016.appsec.eu · • Vulnerabilities and best practices – transaction authorization vulnerabilities, trusted recipients feature abuses,

Internet banking safeguards vulnerabilities - 2016.appsec.eu · • Vulnerabilities and best practices – transaction authorization vulnerabilities, trusted recipients feature abuses,

Documents
 · Database Management Systems Network Fundamentals Innovation Management SEMESTER 4 Operating Systems Security Software and System Vulnerabilities Network Routing and Switching

 · Database Management Systems Network Fundamentals Innovation Management SEMESTER 4 Operating Systems Security Software and System Vulnerabilities Network Routing and Switching

Documents
Hey Google, What Exactly Do Your Security Patches Tell Us ......erage number of unpatched vulnerabilities. Further, Li and Paxson [86] scraped 3,000 vulnerabilities that belong to

Hey Google, What Exactly Do Your Security Patches Tell Us ......erage number of unpatched vulnerabilities. Further, Li and Paxson [86] scraped 3,000 vulnerabilities that belong to

Documents
802.16 Vulnerabilities

802.16 Vulnerabilities

Documents
TCP Vulnerabilities

TCP Vulnerabilities

Documents
WHITE PAPER Deeper Look - Balbix...While performing regular and ongoing scanning for unpatched vulnerabilities is a start in the right direction, it is woefully insufficient given

WHITE PAPER Deeper Look - Balbix...While performing regular and ongoing scanning for unpatched vulnerabilities is a start in the right direction, it is woefully insufficient given

Documents
DOAG BEST OF 2016 - Red-Database-Security · Database Vulnerabilities and CPU Patch situation is getting better but Oracle 12c offers a large, new playground (=tons of new features)

DOAG BEST OF 2016 - Red-Database-Security · Database Vulnerabilities and CPU Patch situation is getting better but Oracle 12c offers a large, new playground (=tons of new features)

Documents
06 Vulnerabilities

06 Vulnerabilities

Documents
Patch Me If You Can: A Study on the E ects of Individual ...web.eecs.umich.edu/~mingyan/pub/PAM17_102-Sarabi.pdfected in the number of known but unpatched vulnerabilities, and unpatched

Patch Me If You Can: A Study on the E ects of Individual ...web.eecs.umich.edu/~mingyan/pub/PAM17_102-Sarabi.pdfected in the number of known but unpatched vulnerabilities, and unpatched

Documents
Database Security: An CAPSTONE REPORT …...vulnerabilities common to databases in large corporations. This inventory is designed to better aid database administrators and security

Database Security: An CAPSTONE REPORT …...vulnerabilities common to databases in large corporations. This inventory is designed to better aid database administrators and security

Documents
Compounded Vulnerabilities in Social Institutions: Vulnerabilities as Kinds

Compounded Vulnerabilities in Social Institutions: Vulnerabilities as Kinds

Documents
Migrant Vulnerabilities

Migrant Vulnerabilities

Documents
Enterprise Open Source (e rischi di adozione) · 2009-03-13 · Sempre sul Report si dice che: 21 percent of vulnerabilities disclosed by the top 5 vendors remain unpatched up from

Enterprise Open Source (e rischi di adozione) · 2009-03-13 · Sempre sul Report si dice che: 21 percent of vulnerabilities disclosed by the top 5 vendors remain unpatched up from

Documents