RE: Oracle CERT Advisory

Thanks Patrice for sharing this info.

So much for "Can't break it. Can't break in. Unbreakable" marketing jingle.

Lisa Koivu
Oracle Database Something.
Fairfield Resorts, Inc.
954-935-4117

> -----Original Message-----
> From: Boivin, Patrice J [SMTP:BoivinP_at_mar.dfo-mpo.gc.ca]
> Sent: Wednesday, March 20, 2002 10:08 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: Oracle CERT Advisory
>
> CERT is working on a "how to fix your Oracle DB" paper, you can ask for a
> copy at info_at_sans.org
>
> Oracle security problems may be more prevalent than previously reported.
> Pete Finnegan, with the help of many of the other Oracle security gurus
> around the world, has completed a first draft of SANS new Oracle Security:
> Step-by-Step guide. We are distributing the list of Oracle security
> problems to be sure we have addressed all the known issues. We'll share
> the
> solutions sections with those people who provide substantive feedback on
> the
> problems. If you know a lot about Oracle security and *will* provide
> feedback, please email info_at_sans.org with the subject "Oracle security
> problems" and we will email you a copy. Include your name, organization,
> city, state, and country.
> Alan
>
> Regards,
> Patrice Boivin
> Systems Analyst (Oracle Certified DBA)
>
> Systems Admin & Operations | Admin. et Exploit. des systèmes
> Technology Services | Services technologiques
> Informatics Branch | Direction de l'informatique
> Maritimes Region, DFO | Région des Maritimes, MPO
>
> E-Mail: boivinp_at_mar.dfo-mpo.gc.ca
>
>
> -----Original Message-----
> [mailto:hemantchitale_at_charteredsemi.com]
> Sent: Wednesday, March 20, 2002 9:43 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: Oracle CERT Advisory
>
> Check http://otn.oracle.com/deploy/security/alerts.htm
>
> Hemant K Chitale
> Principal DBA
> Chartered Semiconductor Manufacturing Ltd
>
> [This e-mail is confidential and may also be privileged. If you are not
> the
> intended recipient, please delete it and notify us immediately; you should
> not copy or use it for any purpose, nor disclose its contents to any other
> person. Thank you.]
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author:
> INET: hemantchitale_at_charteredsemi.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Boivin, Patrice J
> INET: BoivinP_at_mar.dfo-mpo.gc.ca
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Koivu, Lisa
  INET: lisa.koivu_at_efairfield.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).