Page 2

By Lisa Vaas  |  Posted 2003-05-05 Print this article Print

Kelly Cox, an Oracle DBA who runs a consultancy in Alexandria, Va., was also pleased to hear that soon she could access a single view, as opposed to dealing with Oracles current multiplicity of auditing tables. "That table structure of auditing, it doesnt take long to figure out, but DBAs have enough on their plate without having to learn a whole new structure," she said. Another feature of the future OEM will be the ability to not only track what patches have been applied but also to automatically link to Oracle Support Services OracleMetaLink, an online support feature for Oracle customers. This will allow DBAs, when logging on, to automatically receive patches.
Thats yet another thing thats been sorely needed in database security, according to Aaron Newman, chief technology officer and co-founder of Application Security Inc., a New York-based provider of database security technology. "A typical DBA doesnt have one or two servers—they track 50," he said. "So it helps to have a tool help them go across 50 servers to find out what patch was applied where. A tool like that is pretty necessary, not only for security but for data corruption issues."
Such sentiments in support of overburdened DBAs come on the heels of the discovery of a major vulnerability in Oracle databases last Tuesday. The unchecked buffer overflow vulnerability allows virtually any Oracle user to perform the "create database link" task—a privilege assigned to the "connect" role by default. Oracles patch is available on OracleMetaLink to paying support customers. For others, Newman suggested that a workaround would be to revoke the "create database link" from the account of any untrusted user or from those users who dont absolutely need it. Latest Oracle News:
Search for more stories by Lisa Vaas.

Lisa Vaas is News Editor/Operations for and also serves as editor of the Database topic center. Since 1995, she has also been a Webcast news show anchorperson and a reporter covering the IT industry. She has focused on customer relationship management technology, IT salaries and careers, effects of the H1-B visa on the technology workforce, wireless technology, security, and, most recently, databases and the technologies that touch upon them. Her articles have appeared in eWEEK's print edition, on, and in the startup IT magazine PC Connection. Prior to becoming a journalist, Vaas experienced an array of eye-opening careers, including driving a cab in Boston, photographing cranky babies in shopping malls, selling cameras, typography and computer training. She stopped a hair short of finishing an M.A. in English at the University of Massachusetts in Boston. She earned a B.S. in Communications from Emerson College. She runs two open-mic reading series in Boston and currently keeps bees in her home in Mashpee, Mass.

Submit a Comment

Loading Comments...
Manage your Newsletters: Login   Register My Newsletters

Rocket Fuel