CERT people called back and said that there were buffer overrun issues with the PL/SQL module in 8i. They said to check:
Oracle Security Alert #29 http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf Oracle Security Alert #28 http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf Oracle Security Alert #25 http://otn.oracle.com/deploy/security/pdf/modplsql.pdf Oracle Security Alert #22 http://otn.oracle.com/deploy/security/pdf/ias_soap_alert.pdf which is in their text, but there just isn't any entry point for 8i specifically in the announcement. These Oracle annoucements seem like yesterdays news. =============================================================== Ray Stell [EMAIL PROTECTED] (540) 231-4109 KE4TJC 28^D -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Ray Stell INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).