Linda Webb Got breaking Oracle news?     Click here for more Oracle News Headlines

Vulnerabilities Exposed in Oracle, Fixes Released

Oracle has released a list of fixes for many of the security vulnerabilities recently released:

http://news.com.com/Oracle+fixes+pile+of+bugs/2100-1002_3-6027847.html?tag=html.alert

While there are a lot of fixes, the vulnerabilities are clearly marked, which could make them easier to deal with, Pete Finnigan, a security specialist in York, England, wrote on his blog. "This seems like a good mixed bag of fixes, quite a lot in total," he said. "This time it seems possible to isolate the areas affected in more cases due to the more explicit naming of some packages, programs and commands."

 In addition to the fixes, a tool has also been released that checks for default accounts and passwords.

It's meant to help businesses defend their systems against the "Oracle voyager" database worm, which takes advantage of those default items.

Symantec has also followed suit by raising its ThreatCon global threat index to level 2:

In response to the Oracle patch release, Symantec raised its ThreatCon global threat index to Level 2, which means an outbreak is expected. It typically does that after a patch release because malicious hackers might use the fixes as a blueprint for attacks.