Call: +44 (0)1904 557620 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "Security bug in 10.2.0.2 not fixed yet"] [Next entry: "Tmorrow is patch Tuesday - the Oct 2006 CPU is due!"]

SANS Oracle S.C.O.R.E. document has been updated



I saw on the day it was released for review that the SANS Oracle S.C.O.R.E. document that I originally wrote has been updated. The original version 2.0 document - "Oracle database checklist" has been converted to an Excel spreadsheet and issued for review as "Oracle security hardening checklist version 3.1". The original version was the appendix from the Oracle security step-by-step guide and was created as a checklist of most of the issues covered in the book. The new updated version is still heavily based on this list but has been enhanced to include threats, vulnerabilities and checks in most cases.