Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Oracle 9i DB Security Hole

Re: Oracle 9i DB Security Hole

From: Niall Litchfield <niall.litchfield_at_dial.pipex.com>
Date: Thu, 18 Apr 2002 20:36:04 +0100
Message-ID: <3cbf2024$0$232$cc9e4d1f@news.dial.pipex.com>


"Jonathan Lewis" <jonathan_at_jlcomp.demon.co.uk> wrote in message news:1019148031.14139.0.nnrp-14.9e984b29_at_news.demon.co.uk...
>
> I think that your judgement on this case may
> be a bit harsh. Given that it took about 24 hours
> for the patch to appear from the moment the
> post hit the newsgroup, it clearly wasn't a case
> of:
> "It's too difficult / dangerous / expensive to fix,
> let's hope no-one else notices before 9.2"

I'd say that Oracles reaction once they realized the problem was real and serious has been excellent. As someone who has also to support other vendors products where we often get a delay before patch availability and oftentimes several patches for the same problem. That all said I do feel that a bug of this seriousness shouldn't have slipped through QA. I have some sympathy too for the metalink analyst(s?) who missed the significance of what they were seeing. that is all to easy to do especially in a front line support environment.

--
Niall Litchfield
Oracle DBA
Audit Commission UK
Received on Thu Apr 18 2002 - 14:36:04 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US