Oracle Patches Two Dozen FlawsJan 14, 2010, 00:14 (0 Talkback[s])
(Other stories by Sean Michael Kerner)
WEBINAR: On-demand Event
Replace Oracle with the NoSQL Engagement Database: Why and how leading companies are making the switch REGISTER >
[ Thanks to Naomi Graychase for this link. ]
"A CVSS 10.0 score means that if the flaw is exploited, an attacker can take full control of the vulnerable system. There is a catch with this highly critical database flaw, though: Microsoft Windows users are more at risk than Linux or Unix users. Maurice noted that for Linux and Unix deployments, the CVSS score for the same vulnerability is only 7.5, since a full compromise all the way to the operating system level isn't possible on those systems.
0 Talkback[s] (click to add your comment)