Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
Cookie Policy:We only use essential cookies on small sections of this website. For details see here.

Welcome, Guest. Please Login.
Nov 23rd, 2017, 6:58am
News: If you would like to register contact the forum admin
Home | Help | Search | Members | Login
   Pete Finnigan's Oracle Security Forum
   Oracle Security
   Oracle Security
(Moderator: Pete Finnigan)
   Critical Patch Update on 8.1.7.4
« Previous topic | Next topic »
Pages: 1  Reply | Notify of replies | Send Topic | Print
   Author  Topic: Critical Patch Update on 8.1.7.4  (Read 4234 times)
robson.freitas
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile | Email

Gender: male
Posts: 3
Critical Patch Update on 8.1.7.4
« on: Sep 27th, 2005, 8:29pm »
Quote | Modify

Hi all,
 
 Someone knows how to identify if the Database has any CPU applied on Oracle DB 8.1.7.4 Huh
 
 
Regards,
 
Robson Freitas
Brazil.
IP Logged
dlitchfield
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile | Email

Posts: 10
Re: Critical Patch Update on 8.1.7.4
« Reply #1 on: Nov 17th, 2005, 7:54pm »
Quote | Modify

I posted a paper on patch verification on Oracle. Essentially you take snapshots of objects in the database at each patch level. When you want to find out if a given CPU has been installed you check the objects in the database against your list. For full details see "Patch Verification of Oracle Database Servers" at http://www.databasesecurity.com/oracle-securing.htm
Cheers,
David Litchfield
IP Logged
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Critical Patch Update on 8.1.7.4
« Reply #2 on: Nov 18th, 2005, 9:22am »
Quote | Modify

Thanks for the paper David. I was aware of this technique to check patch levels. You can also use OPatch.pl for much more recent patches but it is not reliable. The only reliable method as you have found is to checksum packages and even then Oracle re-release CPU's often the checksums need to be current.
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
robson.freitas
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile | Email

Gender: male
Posts: 3
Re: Critical Patch Update on 8.1.7.4
« Reply #3 on: Nov 18th, 2005, 12:19pm »
Quote | Modify

Thanks for all about the solutions. Thank you David 'Master' Litchfield for the paper...
I'll have a hard work making a automated script to check the CPU over 300  Databases (version 8.1.7.4) or more... The big problem is update this script on every 3 months...
IP Logged
robson.freitas
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile | Email

Gender: male
Posts: 3
Re: Critical Patch Update on 8.1.7.4
« Reply #4 on: Nov 18th, 2005, 12:22pm »
Quote | Modify

A final question .. Does 'NGSSquirrel for Oracle' check this Patch level ??
IP Logged
dlitchfield
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile | Email

Posts: 10
Re: Critical Patch Update on 8.1.7.4
« Reply #5 on: Nov 18th, 2005, 12:24pm »
Quote | Modify

Hi Pete,
8.1.7.4 doesn't use opatch.
Cheers,
David
IP Logged
dlitchfield
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile | Email

Posts: 10
Re: Critical Patch Update on 8.1.7.4
« Reply #6 on: Nov 18th, 2005, 12:25pm »
Quote | Modify

Hi Robson,
Yes, NGSSSQuirreL does.
HTH,
David
IP Logged
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Critical Patch Update on 8.1.7.4
« Reply #7 on: Nov 18th, 2005, 2:03pm »
Quote | Modify

dooohhh, I should have read the version in the question better!
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Pages: 1  Reply | Notify of replies | Send Topic | Print

« Previous topic | Next topic »

Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board