CERT is working on a "how to fix your Oracle DB" paper, you can ask for a copy at [EMAIL PROTECTED]
Oracle security problems may be more prevalent than previously reported. Pete Finnegan, with the help of many of the other Oracle security gurus around the world, has completed a first draft of SANS new Oracle Security: Step-by-Step guide. We are distributing the list of Oracle security problems to be sure we have addressed all the known issues. We'll share the solutions sections with those people who provide substantive feedback on the problems. If you know a lot about Oracle security and *will* provide feedback, please email [EMAIL PROTECTED] with the subject "Oracle security problems" and we will email you a copy. Include your name, organization, city, state, and country. Alan Regards, Patrice Boivin Systems Analyst (Oracle Certified DBA) Systems Admin & Operations | Admin. et Exploit. des systèmes Technology Services | Services technologiques Informatics Branch | Direction de l'informatique Maritimes Region, DFO | Région des Maritimes, MPO E-Mail: [EMAIL PROTECTED] -----Original Message----- [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 20, 2002 9:43 PM To: Multiple recipients of list ORACLE-L Subject: RE: Oracle CERT Advisory Check http://otn.oracle.com/deploy/security/alerts.htm Hemant K Chitale Principal DBA Chartered Semiconductor Manufacturing Ltd [This e-mail is confidential and may also be privileged. If you are not the intended recipient, please delete it and notify us immediately; you should not copy or use it for any purpose, nor disclose its contents to any other person. Thank you.] -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Boivin, Patrice J INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).