Hi Jason, This was reported two weeks ago on this list by Jonathan Lewis. A patch has already been released.
John [EMAIL PROTECTED] wrote: >An dangerous bug has been reported in Oracle lastest >database which is supposed to be 'Unbreakable'. > >See >http://www.dbresources.com/modules.php?name=News&file=article&sid=94 > for details. > >Oracle9i Database Server could allow a remote attacker >with limited database privileges could create a SQL >query that uses the ANSI outer join syntax to gain >unauthorized access to restricted data.This major bug >follows a series of security holes found in Oracle 9i >in recent months. > >The Idea of Oracle providing our national ID card has >started giving me chills now. > > >__________________________________________________ >Do You Yahoo!? >Yahoo! Health - your guide to health and wellness >http://health.yahoo.com > -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Ora NT DBA INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
