Oracle critiqued again over patching speed

By Joris Evers
Staff Writer, CNET News

Related Stories: Gartner: Oracle no longer a bastion of security
January 24, 2006; Oracle to 'Fortify' its source code
December 20, 2005; Halloween treat for Oracle: A database worm
November 1, 2005; Flaw hunters pick holes in Oracle patches
October 27, 2005; Oracle dragging heels on unfixed flaws, researcher says
July 19, 2005

Bug hunter David Litchfield on Wednesday provided limited details on a new, unpatched security flaw in Oracle software. The problem lies in the PLSQL Gateway, a component of the Oracle Internet Application Server, the Oracle Application Server and the Oracle HTTP Server, he said in an e-mail to the BugTraq mailing list. Litchfield is co-founder of U.K.-based Next Generation Security Software and one of Oracle's most vocal critics.

The flaw can be exploited by an attacker to gain full administrator-level control of a database server through a Web server, Litchfield wrote. He provides a workaround in the mail so Oracle users can protect themselves against attacks. The flaw was reported to Oracle on Oct. 26. Litchfield had hoped that Oracle would provide a fix or a workaround on its recent patch release day. "They failed to do so," he wrote.

See more CNET content tagged:
David Litchfield, Oracle Corp., application server, flaw, server

Latest tech news headlines

Economics dooming free streaming sites?
Posted in Digital Noise: Music and Tech by Matt Rosoff

November 23, 2009 10:59 AM PST
Time short to agree on smart-grid standards
Posted in Green Tech by Martin LaMonica

November 23, 2009 10:22 AM PST
IBM taps into group language translation
Posted in News - Digital Media by Lance Whitney

November 23, 2009 10:07 AM PST
See all headlines

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

Markets: Market news, charts, SEC filings, and more; Related quotes; Oracle (1.03%) 0.23 22.57; Dow Jones Industrials (1.09%) 112.61 10,430.77; S&P 500 (1.13%) 12.30 1,103.68; NASDAQ (1.13%) 24.28 2,170.32; CNET TECH (1.37%) 21.56 1,598.81

Inside CNET News

Scroll Left Scroll Right

Digital Media
IBM taps into group language translation
IBM employees are testing n.Fluent, software that can instantly translate documents between English and 11 other languages.
Gallery
Top-rated reviews of the week (photos)
Apple
Schiller: No apologies for App Store approval process
Apple top-level exec Phil Schiller defends the company's role as application gatekeeper for the App Store, telling BusinessWeek that it ensures a good experience for customers.
Beyond Binary
Windows 8 in 2012?
It's not clear what Microsoft's desktop plans are, but the Windows Server team included slides at PDC suggesting a new major release coming around 2012.
Video
Google Chrome OS demonstration
Digital Noise: Music and Tech
Economics dooming free streaming sites?
Lady Gaga's "Poker Face" was streamed more than a million times on European streaming service Spotify. Her take? Less than $200, according to one report.
Video
Google Chrome OS unveiling
Geek Gestalt
Alternate-reality games flourish at the grassroots
While big ARGs like I Love Bees and The Beast get most of the ink, there has been a steady stream of games built for very small audiences, without corporate sponsorship.
The Space Shot
Atlantis astronaut's wife gives birth 220 miles below
Astronaut Randy Bresnik, in orbit on a space station supply mission, celebrated the birth of his daughter 220 miles below in Houston, saying "momma and baby are doing very well."
Gallery
Home energy displays show you the juice (photos)
Crave
Apple Magic Mouse now works on Windows PCs (unofficially)
Windows users still drooling over Apple's multitouch Magic Mouse might finally have an excuse to step into an Apple store, thanks to "a little hackery" by UneasySilence.
Green Tech
Time short to agree on smart-grid standards
The next phase of smart-grid standards is due to start next year but vendors pushing their own home networking options threatens to slow the process, says a NIST official.