The researchers said Oracle is still faulty.

Source: Internet
Author: User
Welcome to the Oracle community forum and interact with 2 million technical staff. A security researcher warned that the latest Oracle update did not solve the original database defects. Last week, Oracle released a quarterly "Major Patch Update" to address more than 30 defects in its software. But David Litch, a researcher at the next generation security software company

Welcome to the Oracle community forum and interact with 2 million technical staff> A security researcher warned that the latest Oracle update did not solve the original database defects. Last week, Oracle released a quarterly "Major Patch Update" to address more than 30 defects in its software. However, David Litch, a researcher at the next generation security software company

Welcome to the Oracle community forum and interact with 2 million technical staff> enter

A security researcher warned that the latest Oracle update did not solve the original database defects.

Last week, Oracle released a quarterly "Major Patch Update" to address more than 30 defects in its software. However, David Litchfield, a researcher at the next generation security software company, sent a message on Wednesday about a vulnerability in Oracle 10g Release 2 that failed to block updates, public attack code can still run.

The malware published on the Internet last week is aimed at a new problem rather than a defect in the Oracle patch released. At first, experts thought it was a vulnerability targeting existing patches.

Litchfield mentioned that intruders can still gain privileges on the system by exporting new defects in extended components through the database DBMS. DBMS export extension components often encounter problems.

Symantec reminds DeepSight smart service users that other 10 Gb versions may also be affected.

The security company suggested, "we strongly encourage database administrators to withdraw the public execution license for DBMS export components until the supplier provides enough patches to solve the problem ."

Oracle's comment on this issue was not received as of press time.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.