NetworkWorld - Oracle publishes out-of-cycle security fix

Oracle executives could not immediately be reached for comment on the update, but the company is advising customers to apply the patch "due to the number of security fixes included," according to enterprise software consulting firm Integrigy. The problems relate to the Oracle Diagnostics Web pages and to the Java classes included with the software, which could be inappropriately used by an attacker. "The most significant issue with the Oracle diagnostics is that some of the diagnostics can be executed without any authentication," Integrigy said in an analysis of the patch.

The link address is: http://www.networkworld.com/news/2006/022706-oracle-security-fix.html