Oracle issues critical technical alert on 8/31

In response to charges of dozens of security vulnerabilities within Oracle products Oracle has just issued a critical technical alert for the following products:

- Oracle Database 10g Release 1, version 10.1.0.2
- Oracle9i Database Server Release 2, versions 9.2.0.4 and 9.2.0.5
- Oracle9i Database Server Release 1, versions 9.0.1.4 and 9.0.1.5
- Oracle8i Database Server Release 3, version 8.1.7.4
- Oracle Enterprise Manager Grid Control 10g, version 10.1.0.2
- Oracle Enterprise Manager Database Control 10g, version 10.1.0.2
- Oracle Application Server 10g (9.0.4), versions 9.0.4.0 and 9.0.4.1
- Oracle9i Application Server Release 2, versions 9.0.2.3 and 9.0.3.1
- Oracle9i Application Server Release 1, version 1.0.2.2

"The unpatched exposure risk is high; exploiting some of these vulnerabilities requires network access, but no valid user account," Oracle said. "There are no workarounds that fully address the security vulnerabilities ... Oracle strongly recommends that customers apply the available patches without delay."