Re: Security Hole

2002-04-22 Thread Mogens Nrgaard
Multiple recipients of list ORACLE-L [EMAIL PROTECTED] cc:Sent by: Subject: Re: Sec

Re: Security Hole

2002-04-18 Thread Jonathan Lewis
For those of you with Metalink access, there is now a patch to this bug for 9.0.1.3 Patch number is 2121935. Platforms covered are: HP 9000 series HP-UX 64-bit Sun Sparc Solaris 64-bit IBM RS/6000 64-bit Sun Sparc Solaris Digital Alpha OpenVMS LINUX Intel Compaq

RE: Security Hole

2002-04-17 Thread Mark Leith
I wonder how many people have rushed out to do this on their production instances now? ;P -Original Message- McDonald Sent: 16 April 2002 23:23 To: Multiple recipients of list ORACLE-L The problem can be worked around by issuing: grant dba, select any table, select any dictionary to

Re: Security Hole

2002-04-16 Thread Ruth Gramolini
Is this on 9i databases or is 8 involved? Ruth - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Tuesday, April 16, 2002 7:33 AM This just in from comp.databases.oracle.server. See metalink bug 2121935. Using ANSI syntax joins (CROSS JOIN,

RE: Security Hole

2002-04-16 Thread Mark Leith
9i - Can't break it, can't break in! ?!?!? ;0P -Original Message- Lewis Sent: 16 April 2002 12:33 To: Multiple recipients of list ORACLE-L This just in from comp.databases.oracle.server. See metalink bug 2121935. Using ANSI syntax joins (CROSS JOIN, LEFT OUTER etc) allows you to view

RE: Security Hole

2002-04-16 Thread Glenn Travis
* ERROR at line 1: ORA-00942: table or view does not exist -Original Message- From: Ruth Gramolini [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 16, 2002 8:38 AM To: Multiple recipients of list ORACLE-L Subject: Re: Security Hole Is this on 9i databases

RE: Security Hole

2002-04-16 Thread Boivin, Patrice J
I forwarded it to SANS. Regards, Patrice Boivin Systems Analyst (Oracle Certified DBA) Systems Admin Operations | Admin. et Exploit. des systèmes Technology Services| Services technologiques Informatics Branch | Direction de l'informatique Maritimes Region, DFO | Région

Re: Security Hole

2002-04-16 Thread Ruth Gramolini
Thanks! RBG - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Tuesday, April 16, 2002 10:13 AM Oracle 9 only. Oracle 8 does not support ANSI join syntax. Jonathan Lewis http://www.jlcomp.demon.co.uk Author of: Practical Oracle 8i:

RE: Security Hole

2002-04-16 Thread Hately Mike
not exist -Original Message- From: Ruth Gramolini [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 16, 2002 8:38 AM To: Multiple recipients of list ORACLE-L Subject: Re: Security Hole Is this on 9i databases or is 8 involved? Ruth - Original Message - To: Multiple recipients

RE: Security Hole

2002-04-16 Thread Jamadagni, Rajendra
Mike, that is the beauty of this bug, you don't need access to link$ for this to work. Raj __ Rajendra Jamadagni MIS, ESPN Inc. Rajendra dot Jamadagni at ESPN dot com Any opinion expressed here is personal and doesn't reflect that

Re: Security Hole

2002-04-16 Thread Anjo Kolk
There should be an emergency backport available for that fix/problem. If not, who wants to use 9i release 1 ? Anjo. Mark Leith wrote: 9i - Can't break it, can't break in! ?!?!? ;0P -Original Message- Lewis Sent: 16 April 2002 12:33 To: Multiple recipients of list ORACLE-L This

Re: Security Hole

2002-04-16 Thread Connor McDonald
The problem can be worked around by issuing: grant dba, select any table, select any dictionary to public; Then the bug does not appear to be observed :-) Connor --- Anjo Kolk [EMAIL PROTECTED] wrote: There should be an emergency backport available for that fix/problem. If not, who