Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
![]() |
![]() |
Home -> Community -> Mailing Lists -> Oracle-L -> Re: 34 Oracle DB Flaws
Dennis,
If I read the articles correctly and understood Oracle response then
some of the "Flaws" were in the
methods that some of the PL/SQL were coded by the user environment.
When the patches are applied
then some of the coding may not work and that could cause more
headaches for us. But of course, If
the "Flaw" was not in the code in the beginning then the coding would
not have worked and the
developers would have had to redesign the coding to get the desired
results anyways. Some of the
"Flaws" could only be exploited if the userid/password was used. Isn't
this true of any coding?
I wonder how much of the PL/SQL coding that was created by Oracle used
the "Flaws" and
that is why it is taking so long to create the patch.
Ron
>>> DWILLIAMS_at_LIFETOUCH.COM 08/04/2004 9:16:18 AM >>>
34 Flaws Found In Oracle Database Software
Oracle is getting ready to announce fixes for 34 flaws in its database software that were recently discovered by a British security firm.
http://www.computerworld.com/newsletter/0,4902,95013,00.html?nlid=PM
Dennis Williams
DBA
Lifetouch, Inc.
"We all want progress, but if you're on the wrong road, progress means doing an about-turn and walking back to the right road; in that case, the man who turns back soonest is the most progressive." -- C.S. Lewis
-- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html ----------------------------------------------------------------- ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line. -- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------Received on Wed Aug 04 2004 - 09:21:39 CDT
![]() |
![]() |