Wednesday, November 09, 2005

Security Expert Pokes More Holes in Oracle Patch

Oracle's software security reputation takes yet another hit.

Paul F. Roberts writes in eWeek:

A noted computer security expert who has clashed with Oracle Corp. in the past is warning customers that a cumulative security patch from the company may overlook a critical hole that could leave Oracle databases open to remote attack.

David Litchfield of NGSS (Next Generation Security Software Ltd.) posted a warning on the Bugtraq security discussion list Tuesday claiming that Oracle's October CPU (Critical Patch Update) failed to install software components on some Oracle systems.

0 Comments:

Post a Comment

<< Home