resource center
  See your link here
|
IDG News Service -
Oracle Corp. yesterday released a bundle of critical security patches for its software, fixing 89 vulnerabilities in products including its database and application servers and in some PeopleSoft and J.D. Edwards applications. A work-around exists for just one of the vulnerabilties, according to Oracle, which recommends applying the patches as soon as possible.
The patches are part of Oracle's quarterly security update program and affect versions of its database software from 8i onward. Customers covered by Oracle's Extended Maintenance Support or Extended Support plans can download the patches.
The company supplied fixes for 33 vulnerabilities in its database server software, many of them easy to exploit and with wide impact on the confidentiality, integrity or availability of information stored in databases. That is as bad as it gets in Oracle's security rating system.
Oracle patched 14 flaws in its application server software (four of them fixed by the database server patches and 10 requiring further patches), 13 flaws in its Collaboration Suite, 22 in its E-Business Suite and one in its Enterprise Manager software.
Six of the patches are for PeopleSoft or J.D. Edwards EnterpriseOne software. There is a work-around for one of these vulnerabilities, which can be fixed by turning off PSOL Manager until the patch is applied.
One of the security vulnerabilities, known as CAN-2005-0873, was already public, Oracle said. According to the Common Vulnerabilities and Exposures list, it allows remote attackers to inject arbitrary Web scripts or HTML into Oracle Reports Server 10g (9.0.4.3.3) via multiple cross-site scripting attacks. Oracle provides few details of the vulnerabilties fixed by the other patches.
More information on Oracle's latest critical patch update can be found online at http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html.
Oracle plans to release its next update on Jan. 17.
IDG.net
Can Heuristic Technology Help Your Company Fight Viruses?
What is Heuristic Technology and how can it help safeguard your business against viruses? Learn more.
Eradicate Spam & Gain 100% Asurance of Clean Mailboxes
Get this paper now!
Effectively Implementing Datacenter Automation
Effectively select and deploy the best datacenter automation solution today!
Mastering eDiscovery: The IT Manager's Guide to Preservation, Protection & Production
Get this paper now!
Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.
Not Just Words: Enforce Your Email and Web Acceptable Usage Policies
Get this paper now!
Security Pathways to Less Complexity
Find pathways to security solutions, possibly peace of mind about your information security.
Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.
Sign up to receive updates on the latest Security resources
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDC
IDG
IDG Connect
IDG Knowledge Hub
IDG TechNetwork
IDG Ventures
IDG.net
InfoWorld
ITwhitepapers
ITworld
JavaWorld
LinuxWorld
Macworld
Network World
PC World
The Industry Standard
Copyright © 1994 - 2009 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission ofComputerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc. |
