Oracle Office of Strategic Influence

From: Steven Hauser <hause011_at_garnet.tc.umn.edu>
Date: 15 Mar 2002 15:38:33 -0600
Message-ID: <a6tpkp$2vp$1@garnet.tc.umn.edu>

The "Big Lie" is effective again.
Here is a Google "Sponsored Link Ad" (a 10,000 dollar account) for the search term "Informix"

>Informix - Is your database safe? Make it safe.
>www.oracle.com Oracle9i Database. Unbreakable. Can't break it. Can't break in.
>Sponsored Link

No software is unbreakable no matter who says it, even ORACLE! (gasp) Now the CERT (late) warnings:

>CERT Advisory CA-2002-08 Multiple vulnerabilities in Oracle Servers
>
> Original release date: March 14, 2002
> Last revised: --
> Source: CERT/CC
>
> A complete revision history can be found at the end of this file.
>
>Systems Affected
>
> * Systems running Oracle8i Database
> * Systems running Oracle9i Database
> * Systems running Oracle9i Application Server
>
>Overview
>
> Multiple vulnerabilities in Oracle Application Server have recently
> been discovered. These vulnerabilities include buffer overflows,
> insecure default settings, failures to enforce access controls, and
> failure to validate input. The impacts of these vulnerabilities
> include the execution of arbitrary commands or code, denial of
> service, and unauthorized access to sensitive information.
>
Received on Fri Mar 15 2002 - 15:38:33 CST