Re: Question on Oracle Security Alert for CVE-2012-1675

From: <Mayen.Shah_at_lazard.com>
Date: Tue, 8 May 2012 14:45:38 -0400
Message-ID: <OF538FC06E.D990BA19-ON852579F8.0066C849-852579F8.00670E34_at_lazard.com>



Thank you Martin,
Please pardon my ignorance, but if I user KEY=REGISTER1, REGISTER2 or ABCDEF and use same key value in local_listener parameter, do I need to make any other change?

Thank you.
Mayen

From: "Martin Berger" <martin.a.berger_at_gmail.com>

To:     Mayen Shah/ITS/Lazard_at_Lazard NYC
Cc:     "oracle Freelists" <Oracle-L_at_freelists.org>, 
oracle-l-bounce_at_freelists.org
Date: 05/08/2012 02:37 PM
Subject: Re: Question on Oracle Security Alert for CVE-2012-1675

Mayen,

can you use different KEY=xxxx values for every listener? This will solve your problem.

(no solution for "12880299 for 10.2.0.3 on Solaris" - please open a SR with Oracle Support!)

On Tue, May 8, 2012 at 8:03 PM, <Mayen.Shah_at_lazard.com> wrote:
> Hello Everyone,
> I am running into several issues with implementation of solution for
this
> security alerts.
>
> 1. There is no patch (or I could not find one) 12880299 for 10.2.0.3 on
> Solaris
> 2. I have multiple databases and multiple listeners running on same
> machine. We have dedicated listener for each database. After adding
> "(ADDRESS = (PROTOCOL = IPC)(KEY = REGISTER))" to one listener, I can
not
> add this to anymore listener.
> 3. One of the databases is using extproc so I have "(ADDRESS = (PROTOCOL
=
> IPC)(KEY = EXTPROC))" in the listener, again preventing me from adding
> KEY=REGISTER.
>
> I any one has encountered this and has solution/suggestion, I would like
> to hear. I already have opened a SR with Oracle support and waiting for
> reply, but often I get more reliable answers - quicker form the experts
on
> the list.

--
http://www.freelists.org/webpage/oracle-l
Received on Tue May 08 2012 - 13:45:38 CDT

Original text of this message