Gary has posted a very interesting article about APEX and the use of DBMS_SYS_SQL titled "Database 11g and Apex by default". This is a good post, i wanted to make a comment on Gary's blog but to do so meant registering with blogger/Google which I dont want to do so my comment is here:
"Thanks for a very interesting post. I think there are issues with this model and recent CPUs with lots of remote exploits/bugs in Apex that dont need authentication clearly confirms this. I agree with you its crazy to enable Apex by default in 11g, lets see if they do. This would feed into the ever increasing array of features enabled by default.."
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "database security bloopers"] [Next entry: "A new Oracle security scanner written in Ruby"]
July 2007
- Checkpwd updated and also released for Mac - 07/05/2007 by 07/05/2007
- Please dont SQL Inject a bank - 07/08/2007 by 07/08/2007
- database security bloopers - 07/10/2007 by 07/10/2007
- Apex and its security model - 07/11/2007 by 07/11/2007
- A new Oracle security scanner written in Ruby - 07/13/2007 by 07/13/2007
- Oracle UK systems accused in 'SSH hacking spree' - 07/16/2007 by 07/16/2007
- CPU July 2007 is out - 07/18/2007 by 07/18/2007
- First exploit released for CPU July 2007 - 07/24/2007 by 07/24/2007
- Checksumming on all supported versions of Oracle - 07/31/2007 by 07/31/2007
Archives
Syndication
Powered by gm-rss 2.0.0
