Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Critical Patch Update on 8.1.7.4
        
(Message started by: Pete Finnigan on Sep 27^th, 2005, 8:29pm)

Title: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Sep 27^th, 2005, 8:29pm

Hi all,

Someone knows how to identify if the Database has any CPU applied on Oracle DB 8.1.7.4 ???

Regards,

Robson Freitas
Brazil.

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 17^th, 2005, 7:54pm

I posted a paper on patch verification on Oracle. Essentially you take snapshots of objects in the database at each patch level. When you want to find out if a given CPU has been installed you check the objects in the database against your list. For full details see "Patch Verification of Oracle Database Servers" at www.databasesecurity.com/oracle-securing.htm - (broken link)
Cheers,
David Litchfield

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18^th, 2005, 9:22am

Thanks for the paper David. I was aware of this technique to check patch levels. You can also use OPatch.pl for much more recent patches but it is not reliable. The only reliable method as you have found is to checksum packages and even then Oracle re-release CPU's often the checksums need to be current.

cheers

Pete

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18^th, 2005, 12:19pm

Thanks for all about the solutions. Thank you David 'Master' Litchfield for the paper...
I'll have a hard work making a automated script to check the CPU over 300 Databases (version 8.1.7.4) or more... The big problem is update this script on every 3 months...

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18^th, 2005, 12:22pm

A final question .. Does 'NGSSquirrel for Oracle' check this Patch level ??

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18^th, 2005, 12:24pm

Hi Pete,
8.1.7.4 doesn't use opatch.
Cheers,
David

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18^th, 2005, 12:25pm

Hi Robson,
Yes, NGSSSQuirreL does.
HTH,
David

Title: Re: Critical Patch Update on 8.1.7.4
Post by Pete Finnigan on Nov 18^th, 2005, 2:03pm

dooohhh, I should have read the version in the question better!

cheers

Pete