Re: Dangerous BUG in Oracle. Oracle Unbreakable ???

Hi Jason,

This was reported two weeks ago on this list by Jonathan Lewis. A patch has already been released.

John

jasonrowski_at_yahoo.com wrote:

>An dangerous bug has been reported in Oracle lastest
>database which is supposed to be 'Unbreakable'.
>
>See
>http://www.dbresources.com/modules.php?name=News&file=article&sid=94
> for details.
>
>Oracle9i Database Server could allow a remote attacker
>with limited database privileges could create a SQL
>query that uses the ANSI outer join syntax to gain
>unauthorized access to restricted data.This major bug
>follows a series of security holes found in Oracle 9i
>in recent months.
>
>The Idea of Oracle providing our national ID card has
>started giving me chills now.
>
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Health - your guide to health and wellness
>http://health.yahoo.com
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Ora NT DBA
  INET: orantdba_at_netscape.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).