RE: Oracle rootkit

There are tools are available at http://red-database-security.com. However, if you want to see something Oracle does provide and the quality of the tool, check out the password checking tool (patch 4926128) and see what Alex Kornburst has to say about it at http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html.

I agree whole heartedly with Jared. If you have done nothing about security yet, you are sitting on a time bomb.

--

Ron Reidy
Lead DBA
Array BioPharma, Inc

-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Ethan Post Sent: Wednesday, January 25, 2006 9:57 AM To: jkstill_at_gmail.com
Cc: oracledba.williams_at_gmail.com; oracle-l Subject: Re: Oracle rootkit

I would think Oracle would take the initiative to start providing tools to detect and remove this type of thing, but I suspect we won't see that until a large public incident of infection or data compromise.

Have not looked at the list of Hotsos 2006 topics yet, wonder if any will be dealing with this type of thing.
--

http://www.freelists.org/webpage/oracle-l

This electronic message transmission is a PRIVATE communication which contains information which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, please be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Please notify the sender of the delivery error by replying to this message, or notify us by telephone (877-633-2436, ext. 0), and then delete it from your system.

--

http://www.freelists.org/webpage/oracle-l Received on Wed Jan 25 2006 - 11:02:47 CST