Don't confuse the oracle concept with "Oracle" - its with regards to a mathematical concept - check out these for reference to the idea behind it the exploit itself. As far as the update is concerned its affects ALL versions of ASP.NET, including SharePoint (the versions that use asp.net)
http://en.wikipedia.org/wiki/Random_oracle http://www.limited-entropy.com/padding-oracle-attacks http://www.iacr.org/archive/eurocrypt2002/23320530/cbc02_e02d.pdf From: [email protected] [mailto:[email protected]] On Behalf Of Craig van Nieuwkerk Sent: Wednesday, 29 September 2010 10:57 AM To: ozDotNet Subject: Re: IMPORTANT - ASP.NET update and security advisory It is unrelated to databases at all, the Oracle name does confuse things though. On Wed, Sep 29, 2010 at 10:36 AM, <[email protected]<mailto:[email protected]>> wrote: Question - does this just affect people using Oracle, or does it affect all .net instances?
