Re: Remote Compromise in Oracle

From: James Howerton <jhowerton_at_uabmc.edu>
Date: Thu, 07 Feb 2002 08:49:26 -0800
Message-ID: <F001.00408FFD.20020207084739@fatcity.com>

Ray,

Yes take a look at http://otn.oracle.com/deploy/security/alerts.htm they have workarounds posted with yesterdays date.

...JIM...
>>> stellr_at_cns.vt.edu 2/7/02 9:55:18 AM >>>

The post here yesterday on this topic was underwelming:

NGSSoftware Insight Security Research Advisory

Name: Oracle Remote Compromise
Systems Affected: Oracle 9, 8
Platforms: All Operating Systems
Severity: High Risk
Vendor URL: http://www.oracle.com/
Author: David Litchfield (david_at_nextgenss.com) Date: 6th February 2002
Advisory number: #NISR06022002A
Advisory URL: http://www.nextgenss.com/advisories/oraplsextproc.txt

Does Oracle Corp have a response on this?

Ray Stell stellr_at_vt.edu (540) 231-4109 KE4TJC 28^D

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com 
-- 
Author: Ray Stell
  INET: stellr_at_cns.vt.edu 

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: James Howerton
  INET: jhowerton_at_uabmc.edu

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Thu Feb 07 2002 - 10:49:26 CST