Check out this posting: http://blogs.washingtonpost.com/securityfix/2006/01/oracle_issues_w.html

There are so many comments I want to make but I'm going to refrain. I'm just flabbergasted that anyone still runs Oracle.