27 Oct 2005
Joshua Wright, a renown security expert and researcher at SANS Institute, released details of how to breech the Oracle password hashing algorithm during a presentation at the SANS Network Security conference in Los Angeles.
He demonstrated an attack tool he wrote that makes it possible to recover the plaintext password from even very strong, well written passwords within minutes.
Along with colleague Dr Carlos Cid from the Royal Holloway, University of London, Joshua Wright has written a paper which details how passwords are encrypted before being stored in Oracle databases.
Oracle were alerted to the vulnerability in July.
The SANS Institute (SysAdmin, Audit, Networking, and Security) is an organisation that focuses on providing computer education and information security training.
The paper is available from the SANS Reading Room.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Salesforce.com Consultants, both Functional or Technical...
Enterprise Data Architect required by reputable Banking...
SSIS, SSAS, MDX, OLAP, OLTP, Data Warehousing, Data Modelling...
Specialist IT service provider is looking to recruit...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?