[
From Oracle Technology Network]
A potential security vulnerability has been discovered in the TO_TIMESTAMP_TZ function of
Oracle9i Database. A knowledgeable and malicious user can exploit a buffer overflow in this
function.
This potential security vulnerability is fixed in the last patchset level for each database release on
all platforms. It will be available in the Oracle9i Database Release 2 v 9.2.0.3 patchset. It is
available on Oracle9i Database Release 2 v 9.2.0.2, Oracle9i Database Release 1 v 9.0.1.4, on
Oracle8i Database v 8.1.7.4, on Oracle8i Database v 8.1.7.2 and on Oracle8i Database v 8.1.7.0.
It is available for Oracle8 Database v 8.0.6 on demand.
Download currently available patches from Oracle Worldwide Support Services web site, Metalink
(http://metalink.oracle.com).
Alert #50, Rev 2, Updated 14 February 2003
Patches are available on Metalink.
The article continues at
http://otn.oracle.com/deploy/security/pdf/2003alert50.pdf
» 
IE 7
Firefox 2.0
Comment and Contribute
