Hi Geoff,

Wow, those are worrying holes. I am fortunate in that the nature of
our application means that physical file security is not something we
really need to worry too much about. The second one is not quite so
major, but still a definite problem. The first one is really bad.

Adam

> - Change generator values. There is no security checking on
> generators, and changing generator values would upset many
> database applications.
>
> - Create other database objects and start filling them with
> data (thus filling disks and perhaps impacting performance)
>