Holes uncovered in Oracle Application Server

NEWS Internet Security Systems (ISS) has found a security hole in Oracle's Application Server (OAS) that could lead to outsiders accessing businesses' computer systems. According the company, multiple security failures can be found in version 4.0 for Solaris as well as all versions prior to the 4.0.8. It claims the vulnerabilities could be used by attackers to destroy root-owned files as well as to gain access to internal systems. Oracle has supplied ISS with two potential fixes for the security holes. Information can be found by contacting the company at http://www.iss.net/tech/flexchecks/