A security advisory from Integrigy details multiple bugs in the Oracle spatial package MDSYS.MD2. The Oracle Reports Server leaks database passwords and there is a Denial of service in the Oracle Forms server. There are also multiple SQL Injection issues in the Oracle E-Business Suite.
No comments