Re: tns vunerability & patch for 8i on NT

From: Paul Drake <paled_at_home.com>
Date: Sat, 21 Jul 2001 21:31:14 GMT
Message-ID: <3B463CD6.9B16862D@home.com>

Kevin Crawford wrote:

> Can anyone give me the patch number for the tns vunerability recently
> discovered in 8i? I've found patches for Solaris (1489683) and VMS
> (1859628) on Oracle's Metalink site, but nothing for NT.
>
> Thanks,
> Kevin

Buffer Overflow Vulnerability in the Oracle 8i Listener: http://otn.oracle.com/deploy/security/pdf/nai_net8_bof.pdf

The patch number is 1855362 - Oracle 8.1.7.1.4 Patch for Windows NT and 2000

 Patches

---

   Oracle has fixed this potential security vulnerability in the Oracle9i

   database server. Oracle is in the process of backporting the fix to    supported Oracle8i database server Releases 8.1.7 and 8.1.6 and Oracle8

   Release 8.0.6 on all platforms.

   The following patches are currently available from MetaLink web site:

       8.1.7.1  Patch 1859604
       8.1.7.0  Patch 1859628
       8.1.6.3  Patch 1859654
       8.1.6.2  Patch 1859778
       8.1.6.1  Patch 1859788
       8.1.6.0  Patch 1859791
       8.0.6.3  Patch 1864109

   Download the patch for your platform from Oracle Support Services web site,

   MetaLink, http://metalink.oracle.com. Please check MetaLink periodically for

   patch availability if the patch for your platform is not yet available.

hth,

Paul Received on Sat Jul 21 2001 - 16:31:14 CDT