Well one of our Oracle DBA's solved this by:
 
These instructions are relevant to Oracle 9i.  They may apply to other versions, but I can't vouch for it.

If you've installed the Oracle XML Database (XDB) feature, the listener will be listening on port 8080 for http traffic and on 2100 for ftp
traffic.  Many people may install this just in case they decide to use the feature some time in the future, not realizing that, by default, their listener is listening on these ports.

In order to stop the listener from listening on ports 8080 and 2100, the initialization parameter of "dispatchers" needs to be reset to null.


If you're running an spfile, one method to reset the "dispatchers" parameter is as follows:

1.  Shutdown the database
2.  create pfile from spfile
3.  Edit the init.ora file to remove the "dispatchers" parameter
4.  create spfile from pfile
5.  Startup the database

If you're database is using a pfile, directions are as follows:


1.  Shutdown the database
3.  Edit the init.ora file to remove the "dispatchers" parameter
5.  Startup the database

Also, after getting burned with a database crash, you may also want to tighten up the contents of your listener.ora and tnsnames.ora to remove anything in there that you're not using (such as http, extproc, etc.).

For people who want to use the XML Database feature, they should research the appropriate Oracle security patches.  This note is NOT intended to imply that the Oracle XML Database feature cannot safely be used.





 > Okay, seems we have a problem on two systems both running AIX 5.2, one running Oracle 9.2.0.1 and another running 9.2.0.6. On these  particular  systems a Nessus scan (now with 2.2.3 or with the older version back in October 2004 whatever was current then,) crashed the DB's.
 
 > This is not consistent, as we have another host in the same subnet, configured the same way with the same version of Oracle and it had no effect.
 
 
 
John
Director Systems
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to