Database Journal
MS SQL Oracle DB2 Access MySQL PostgreSQL Sybase PHP SQL Etc SQL Scripts & Samples Tips Database Forum

» Database Journal Home
» Database Articles
» Database Tutorials
MS Access
SQL Scripts & Samples
» Database Forum
» Slideshows
» Sitemap
Free Newsletters:

By submitting your information, you agree that databasejournal.com may send you databasejournal offers via email, phone and text message, as well as email offers about other products and services that databasejournal believes may be of interest to you. databasejournal will process your information in accordance with the Quinstreet Privacy Policy.

News Via RSS Feed

Database Journal |DBA Support |SQLCourse |SQLCourse2

Featured Database Articles

Database News

Posted Oct 29, 2003

Unauthorized Access to Restricted Content in Oracle Files

By DatabaseJournal.com Staff

[From Oracle Technology Network]

A potential security vulnerability has been discovered in the Oracle Files component that ships with Oracle Collaboration Suite Release 1. A knowledgeable and malicious user of Oracle Files can potentially access restricted content. In the Oracle Files component that ships with Oracle Collaboration Suite Release 1, Oracle WebCache has default cacheability rules for the following types of files: js, html, pdf, bmp/png, and jpg/jpeg. Releases previous to Oracle Files Release did not override these cacheability rules. Interactions with the Oracle Files component and these rules can lead to the unauthorized access of restricted content by any user of Oracle Files.

Products Affected:

  • Oracle Files Release
  • Oracle Files Release
  • Oracle Files Release

NOTE: Oracle Files Release and later releases are not affected. Ebusiness Suite is not affected.

The article continues at http://otn.oracle.com/deploy/security/pdf/2003alert60.pdf

Database News Archives

Comment and Contribute


(Maximum characters: 1200). You have characters left.



Latest Forum Threads
Database News Forum
Topic By Replies Updated
Efficient SQL Server Indexing by Design lcole 0 April 30th, 12:38 PM
Mine Oracle Database, SQL Server and Other Databases with Monarch Data Pump Pro V10.5 lcole 0 April 30th, 12:37 PM
Oracle Database and Oracle Fusion Middleware for Private Social Network Application lcole 0 April 30th, 12:31 PM
Oracle Database Maintains a Stronghold in the DBMS Market lcole 0 April 30th, 12:30 PM