InternetOracle WebLogic Server Rates a 10 for Big Flaw

For the first time in more than three years, Oracle releases an out-of-cycle patch security alert.

Oracle has had an interesting record for the past three and a half years when it comes to security. Since January 2005, Oracle has not had to release an out-of-cycle security alert for its products. That record ended this week with the public report of a serious vulnerability in Oracle's BEA WebLogic Web server, which rates a 10 on the Common Vulnerability Scoring System (CVSS) scale. The vulnerability could be remotely exploited by an attacker without authentication and could leave a WebLogic server at the mercy of a hacker. "Unfortunately, the person(s) who published this vulnerability and associated exploit codes did not contact Oracle before publicly disclosing this issue," Eric Maurice, manager for security in Oracle's global technology business unit, noted in a blog post. "This means that the vulnerability was made public before providing Oracle an opportunity to develop an appropriate fix for this issue and notify its customers." RELATED ARTICLES Oracle Unveils Access Management Suite Oracle Fuses BI, Performance Management Oracle Blasts SAP in Amended TomorrowNow Suit Oracle Patches 45 Vulnerabilities Oracle Prevails in BEA Bid For more stories on this topic: The out-of-cycle alert comes barely two weeks after Oracle's July critical patch update, or CPU, which is a quarterly release for security updates to Oracle products. The July CPU was also the first one that included the BEA WebLogic server since... [ Read more on www.internetnews.com ]

InternetMotorola Buys AirDefense

Acquisition puts it on better footing against Cisco, Aruba Network offerings.

InternetFirefox Alpha Improves the AwesomeBar (PC Magazine)

PC Magazine - Though it's been less than a month since Firefox 3's blast-off into the Internet and a software download record, Mozilla developers have already distributed a very early preview of the next upgrade to the increasingly popular browser, code-named Shiretoko.