[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
fix for recently disclosed Oracle interval conversion overflows?
- To: bugtraq@securityfocus.com
- Subject: fix for recently disclosed Oracle interval conversion overflows?
- From: Marc Bejarano <bugtraq@beej.org>
- Date: Fri, 20 Feb 2004 13:42:56 -0400
on 2/5, cesar cerrudo sent an advisory about some buffer overflows in
interval conversion funcions in Oracle Database 9ir2 to the ntbugtraq
mailing list [1].
the advisory says:
==
Vendor Fix:
Go to Oracle Metalink site,
<http://metalink.oracle.com>http://metalink.oracle.com
Vendor Contact:
Oracle was contacted and they released a fix without telling me nor the
public anything and without issuing an alert
==
i went to metalink to look for a fix, but it was anything but obvious which
patch contains the fix.
anybody know which one does?
marc
[1] http://cert.uni-stuttgart.de/archive/ntbugtraq/2004/02/msg00015.html