News

6 New Oracle Flaws Patched

Security researchers at CERT/CC underscored the importance of a group of newly patched vulnerabilities in Oracle Corp.'s enterprise software, including versions that run on Windows servers.

The security flaws affect the Oracle9i Database, release 1 and 2; the Oracle8i Database, version 8.1.7; the Oracle8 Database, version 8.0.6; and the Oracle9i Application Server, releases 9.0.2 and 9.0.3, according to the CERT advisory issued Wednesday.

The worst flaws among the four new buffer overflow vulnerabilities and two vulnerabilities in the application server can allow an attacker to execute arbitrary code. All of the flaws were discovered by security researchers at Next Generation Security Software, Ltd., which notified Oracle about the problems back in September.

The CERT/CC Advisory can be found at www.cert.org/advisories/CA-2003-05.html.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • An image of planes flying around a globe

    2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Microsoft to Shut Down Skype Services

    Microsoft will discontinue its Skype telecommunications and video calling services on May 5, 2025, marking the end of the platform's decades-long run.

  • Big Blue To Acquire Datastax in Enterprise AI Play

    In a bid to bolster its enterprise-aimed AI capabilities, IBM is planning to acquire Datastax, a leading AI and data solutions provider, for an undisclosed amount.

  • Microsoft Confirms End of HoloLens Mixed Reality Hardware

    Microsoft officially announced this week that it is discontinuing its HoloLens mixed reality hardware, marking the end of its efforts in the space.

Most   Popular