security vulnerability in 9.2.0.1 - XDB

I caught this one off of the SANS mailing list this morning.

http://www.symantec.com/avcenter/security/Content/8375.html

It appears that the default database config using dbca does create this service.
I do not yet know if the fix for this is included in the 9.2.0.4 patchset.
It seems reasonable to me to simply disable the service that starts the daemon that listens on the 2 ports. I'm looking forward to Oracle's announcement on this item.

Pd Received on Tue Aug 19 2003 - 06:11:33 CDT