Oracle has released the April 2006 quarterly patch update. If you have any Oracle software running in your environment, it's probably time for checking to see if you need to patch. Of interest is the updated version of password checking utility (Oracle Default Password Scanner) that was originally released in January, if you have never tested your Oracle databases for default passwords, it's probably a good time to consider a scanning exercise. Default account/password is still by far the most common Oracle vulnerabilities.

http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html

-----------------
Jason Lam      jason /at/ networksec.org