Slashdot Mirror

← Back to Stories (view on slashdot.org)

Emergency Workaround For Oracle 0-Day

Posted by kdawson on from the maybe-somebody-shorted-the-stock dept.

Almost Live writes "Oracle has released an out-of-cycle alert to offer mitigation for a zero-day exploit that's been posted on the Internet. The emergency workaround addresses an unpatched remote buffer overflow that's remotely exploitable without the need for a username and password, and can result in compromising the confidentiality, integrity, and availability of the targeted system." Whoever published the vulnerability and matching exploit code did not contact Oracle first.

2 of 152 comments (clear)

  1. Re:Whoops, that was my fault by Anonymous Coward · · Score: -1, Flamebait

    I went to Africa and said "Hey, look at all the niggers!". Now THAT is l33tness. Apology accepted.

  2. Another victim of C/C++ lack of array safety by Animats · · Score: 0, Flamebait

    The C/C++ defect that the compiler has no idea of the size of an array claims another victim.