DB: TNS Declare/Exec SQL Injection

This signature detects a possible attempt at SQL injection. An attacker can use SQL over TNS to "declare" a variable (varchar) with an exploit encoded inside it. An "exec" command executed on the variable then executes the encoded exploit. These functions have non-malicious application and therefore should only be used between an HTTP server front-end and the Oracle database server back-end, and not between an administrator's management station and the database server or false positives can result.

Short Name

DB:ORACLE:DECLARE-EXEC

Severity

Minor

Recommended

False

Recommended Action

Drop

DB: TNS Declare/Exec SQL Injection

Found a potential security threat?