Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
There are 21 visitors online    

Pete Finnigan's Oracle security weblog


Home » Archives » August 2005 » Doug talks again about ? and catpatch.sql

[Previous entry: "Bell Labs Dept 1127 has finally gone"] [Next entry: "Alex Kornbrusts Black Hat presentation on reverse engineering Oracles encryption packages"]

Doug talks again about ? and catpatch.sql

August 18th, 2005 by Pete

Post to del.icio.us   Post to Furl   Digg!

I saw an interesting post this evening on Doug's blog titled "More on ? and catpatch.sql". This follows on from Doug's previous post "? shortcut in sqlplus" and my comments in "Some good tips on Dougs blog?".

Doug has been digging through various installations both at home and at work looking for examples of the "?" short cut for ORACLE_HOME in Oracle's scripts. It took some finding but he eventually found one example in catpatch.sql. The fact that he had great trouble finding an example perhaps emphasises the issues discussed before that running a script from a remote client that also has Oracle installed would result in the remote version of the script being run rather than the local one. This could be a serious issue. The fact that Doug found his only example in catpatch.sql is also a worry considering the recent issues with installing patches.


August 2005
SMTWTFS
 123456
78910111213
14151617181920
21222324252627
28293031   

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Weblog Home
Weblog Archives

Oracle Security Step-by-Step (Version 2.0)

Home
Oracle Security Tools page
Oracle security papers
Oracle Security alerts

Web Development
SQL Server Security

RSS 1.0 FEED
RSS 2.0 FEED
Atom 0.3 FEED
Powered by gm-rss 2.0.0


Valid XHTML 1.0!