Understanding Database Protocol Loopholes And Access Risks

A security expert is warning database administrators about a continued loophole in database communication protocols that would allow an attacker to bypass access controls and gain access to critical files.

In his presentation to attendees at the recent Black Hat DC training conference, Amichai Shulman, chief technology officer and founder of Foster City, Calif.-based database-monitoring vendor Imperva Inc., explained that the client-server protocols, which are used to exchange data and commands between client software and database servers over TCP/IP, are ripe for attack.

The link for this article located at SearchSecurity.com is no longer available.