Oracle Application Server 10g

From: Serguey Forcade (sergueyf@gmail.com)
Date: Tue Sep 05 2006 - 23:00:55 EDT


Hello, I'm running a penetration test on a client's company. They're using
Oracle HTTP Server / Oracle Application Server 10g / OracleAS Web cache to
publish their web page. Scanning the host it shows the ldap port open and I
figured it belongs to the Oracle Internet Directory service. Could anyone
point me in the right direction to pen-test the LDAP Directory?

Thanks in advance.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:54 EDT