Subject Re: [IBDI] Bob Swart's comment on security
Author Fabricio Araujo
On Wed, 31 Jan 2001 01:31:16 -0400, Claudio Valderrama C. wrote:

Ahahahaahha!!!! Is because of this that I LOVE software industry...
Is the one only industry that you can expect any type of thing, coming
from anyone.... LOL...

>http://www.drbob42.com/oracle/index.htm
>says
>

>2001/01/22 - Oracle XSQL Security Problem
> It seems InterBase isn't the only one with security problems (fixed), as
>we've just learned that the Oracle XSQL servlet allows you to specify
>external XSLT stylesheets which may reside anywhere and can execute Java on
>the web server - which may lead to compromising the server.
> The Oracle XSQL is part of the default installation of Oracle8i 8.1.7 on
>Windows 2000 (and probably other platforms).

>
> As one person wrote, the IB lesson is expected to make other DB engine
>vendors to take a peek at their code.
>
>C.
>---------
>Claudio Valderrama C.
>Ingeniero en Informática - Consultor independiente
>http://www.cvalde.com
>
>
>Community email addresses:
> Post message: IBDI@onelist.com
> Subscribe: IBDI-subscribe@onelist.com
> Unsubscribe: IBDI-unsubscribe@onelist.com
> List owner: IBDI-owner@onelist.com
>
>Shortcut URL to this page:
> http://www.onelist.com/community/IBDI
>