Oracle Ships Delayed Patch
An addendum to the database's quarterly update fixes a flaw on Windows systems.
Robert McMillan, IDG News Service
Oracle probably worried some database advisers last week when it released its Critical Patch Update, but neglected its most critical database flaw of the quarter for 9.2.0.8 users on the Windows platform. Now, the database vendor has made good on its promise of an interim update.
The quarterly release on April 17 omitted a fix for a known flaw for users running the Windows operating system. At the time, Oracle said this fix would come on April 30, but now it looks like Oracle has found a way to get the patch out.
That flaw, known as DB01, is in the Core relational database management system (RDBMS) used by Oracle's database. It can be remotely exploited over the network and unlike most of the database flaws, an attacker does not need to have authentication rights to the database to exploit the problem.
Oracle's Eric Maurice made the announcement on Friday afternoon.
It turns out that security researcher David Litchfield first discussed this flaw in November 2005. After Oracle released its Critical Patch Update last week, he published this research note, discussing this and a few other flaws that were patched this month. Litchfield, managing director of Next Generation Security Software, says he first reported the bug to Oracle in 2002.
With HP wireless printers, you could have printed this from any room in the house. Live wirelessly. Print wirelessly.
Turn Data into Dollars
Related Office Articles
- Microsoft-led Group Launches New Open XML-interop Tools A group of vendors led by Microsoft and aimed at fostering interoperability between different document formats has unveiled...
- Get More From Outlook With Hassle-Free PC PC World blogger Rick Broida reviews the Xobni search tool and YouSendIt Outlook plug-in, plus a terrific program that inserts text in any app.
- WriteRoom 2.3 WriteRoom is what TV chef Alton Brown would call a "unitasker": It's a tool designed for only one function. But while Brown...
- Beta Watch: Juice, EveryScape, Shoeboxed This month we look at a Firefox 3 add-on that enhances searches, a Web service that takes you inside buildings, and an online manager for receipts and business cards.
- SugarCRM Keeps You Closer to Your Customers Track your contacts, appointments, sales opportunities, and more with this simple online customer relationship management app.
Best Prices on Antivirus Software
Norton AntiVirus 2009 (Full Product)Price: $14.95
Anti-Virus 7.0 (Electronic Software Distribution)Price: $29.95
VirusScan Plus 2009Price: $9.00
NOD32 AntiVirus 3.0Price: $19.00
VirusScan Plus 2008 - 3-User (Full Product)Price: $6.89
Internet Security Suite - 3-User (Full Product)Price: $10.50
- Asus Laptop Showcase Ultra-fashionable thin and light notebooks with SmartLogon Face Recognition. Find out more...
- Personal Productivity Want to make the most of your limited time? Click here for more info...
- Dell Servers for Small Business Click here to see how a Dell server can help you back up your company's data and save you valuable time.








"Oracle Ships Delayed Patch" Comments