Oracle Security Alert #68
High Nessus Network Monitor Plugin ID 2277
SynopsisThe remote host appears to be running a vulnerable version of Oracle Database Server.
DescriptionThe remote host appears to be running a vulnerable version of Oracle Database Server. It is reported that Oracle Database Server version 8.1.7, 126.96.36.199, 188.8.131.52, 9.0.4, 184.108.40.206, 220.127.116.11 and 10.1.0.2 are prone to multiple vulnerabilities including buffer overflow issues, PL/SQL injection, trigger abuse, character set conversion bugs and denial of service issues. An attacker may exploit these vulnerabilities to deny service to legitimate users or to execute arbitrary code on the remote server.
SolutionDownload and install the relevant patch from Oracle.