Carrie
08-05-2004, 11:19 AM
Database giant Oracle has been censured by a leading security expert for sitting on fixes to defend against a wide variety of security vulnerabilities affecting its database software.
UK-based Next Generation Security Software (NGS Software) has identified 34 security vulnerabilities affecting various versions of Oracle's database software. Around half these flaws affect the latest version of Oracle's database software, 10g. At least one of these bugs could be exploited to give attackers remote access to corporate database servers without a user ID or password. NGS Software told Oracle about the vulnerabilities in January and early February. Oracle is holding up the release of fixes - developed two months ago, according to NGS Software - until its new patch distribution system is ready to go live.
Full Story (http://www.theregister.co.uk/2004/08/05/oracle_security_flap/)
UK-based Next Generation Security Software (NGS Software) has identified 34 security vulnerabilities affecting various versions of Oracle's database software. Around half these flaws affect the latest version of Oracle's database software, 10g. At least one of these bugs could be exploited to give attackers remote access to corporate database servers without a user ID or password. NGS Software told Oracle about the vulnerabilities in January and early February. Oracle is holding up the release of fixes - developed two months ago, according to NGS Software - until its new patch distribution system is ready to go live.
Full Story (http://www.theregister.co.uk/2004/08/05/oracle_security_flap/)