Security Alert #29 Oracle PL/SQL EXTPROC vulnerability

I am not familiar with Oracle Applications. We are running version 11.0.3. I need to know if the HR module of this product uses EXTPROC. If it doesn't the easiest way to get around this vulnerability is to disable this function. The database version is 8.0.5 and the version of Solaris is 2.6. Any assistance in this matter would be greatly appreciated. My phone number is 732-578-2745 or e-mail is [email protected] Thank you.

Thanks- this was fixed.
OTN

Similar Messages

Alert #68: Oracle Security Update

Hi All ,
I am new to the world of Oracle EBS and I was recently assigned the DBA task in my company for the ebs 11.5.10.2 that was installed be a former DBA .
Our security department are following up on a security update by oracle in the link .
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
I see that my database is version 9.2.0.6 so I do not think I need to do anything there . Is that true ?
For the application server , Can someone help me to find what version I have ? Also , How do I apply the patch if needed .
I also do not know if the former DBA already installed the patch or not how do I find out ?
Thanks

Saeed,
You do not need to install any iAS rollup patch since you are on the latest one.
For Oracle HTTP Server security patches, you need to have Patch 3835781 installed. This is already explained in the following notes:
Note: 281189.1 - SECURITY ALERT #68 - Oracle Security Update (Patch Availability Matrix)
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=281189.1
Note: 283402.1 - How to Patch Application Server for Security Alert 68 - Specific Examples
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=283402.1
Note: 282426.1 - Security Alert #68 - FAQ for Oracle Application Server Products
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=282426.1

Java error - Oracle Security Alert for CVE-2010-4476

I have come across this security alert described at http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.htm l
In summary - Java Runtime Environment hangs when converting "2.2250738585072012e-308" to a binary floating-point number.
This vulnerability affects:
Java SE
JDK and JRE 6 Update 23 and earlier for Windows, Solaris, and Linux
JDK 5.0 Update 27 and earlier for Solaris 9
SDK 1.4.2_29 and earlier for Solaris 8
Java for Business
JDK and JRE 6 Update 23 and earlier for Windows, Solaris and Linux
JDK and JRE 5.0 Update 27 and earlier for Windows, Solaris and Linux
SDK and JRE 1.4.2_29 and earlier for Windows, Solaris and Linux
Java for MacOS X 10.6 update 3 updates Java to SE 6 to version 1.6.0_22.
Is anyone aware of new Java update for Mac that will fix this problem? If one doesn't exist, does anyone know when a new update will be available?
Thanks.

Hi Hussein,
have you applied this? Please can you update?
Our environment: 11.5.10.2 (9.2.0.7)running on HP-UX PARISC. We are using Jinitiator. We are not yet migrated to J2SE Plugin.
So, since the sercurity patch is for JRE, is that still required for our environment?
Please advise?
Edited by: oraDBA2 on Feb 13, 2011 9:12 PM

Oracle Security Alert for CVE-2012-1675

Hi,
I want to know more about recent release "Oracle Security Alert" : http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html
Document available in https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1453883.1
Fix is about Class of Secure Transport (COST). I need to know about elaborate steps to find out whether this change is need to apply to my databases or not.
About my DBs : 10.2.4 , AIX, Nondefault Listener, Shared env , non RAC, local_listener is null & running in pfile.
Thx,
Gowin.

Hello;
Apply it. Very clean. Simple. No outage on Non-RAC. Biggest Impact is listener stop and start. Took about 3 minutes per server.
Tested today and had zero issues. ( Assumed you understood a CONNECT was part of the test ). Zero issues.
Had a thread on this here a few days ago :
Oracle TNS Poison vulnerability
See Oracle Support Note 1453883.1 for additional information.
Best Regards
mseberg
With all due respect this isn't very hard. Make a decision.
Edited by: mseberg on May 2, 2012 7:13 AM

Oracle Security Alert #48

Does Oracle Security Alert #48 (bug 2642117) - Buffer Overflow in DIRECTORY parameter of Oracle9i Database Server effect Oracle 8i v 8.1.6.0 database?
I know the Oracle Alert states it effects Oracle 8i v 8.1.7, but I'm not sure if that would mean it effects older releases like v 8.1.6.0.
Thanks

Some clips:
"Products Affected
Oracle9i Database Release 2v, Version 9.2.x
Oracle9i Database Release 1v, Version 9.0.x
Oracle8iDatabase,Version 8.1.x
Oracle8 Database, Version 8.0.x"
"Currently there are no plans to release a patch for 8.0.5.x, 8.1.5.x, 8.1.6.x."

TNS Listener Poison attack : Oracle Security Alert for CVE-2012-1675

Hi,
I'm looking to implement the following oracle document about COST but not sure what we need to do for Standby Environment ,
Can you guys please advise.
Oracle Using Class of Secure Transport (COST) to Restrict Instance Registration [ID 1453883.1]
Oracle Security Alert for CVE-2012-1675
Thanks

user097815 wrote:
with regrads to the below thread which mostly talks about Oracle Security Alert for CVE-2012-1675 "TNS Listener Poison Attack"....i just wanted to find out if this effect DB that are externally or internally....meaning 95% of our DB are in network(internally) behind our firewall....and rest of the 5% are outside our firewall facing the world wide web....so does this apply to both of just one ?The attack is on the Listener itself - so if you want to prevent this attack, you need to secure that Listener, irrespective of its location.
IMO, mandatory if you expose your Listener to an unsecured or public network (e.g. internet).
As for Listeners running on your internal network - if this attack is used, securing your Listeners mean very little IMO. Because your internal network already needs to be compromised in order for the attack to occur. Which means you have far more serious problems then someone attacking your Listeners.

Oracle Security Alerts via e-mail

Hi -
I'm trying to figure out how to get Oracle to send security alerts to me via e-mail, instead of my having to go to the web site (http://otn.oracle.com/deploy/security/alerts.htm).
Thank you!!

Hi Anand,
Go thru this link for establising a HTTP Connection to the external mail server
http://help.sap.com/saphelp_47x200/helpdata/en/ae/71583ca544eb51e10000000a114084/content.htm
>>where do I do I maintain the e-mail address to which theses alerts to be forwarded
The steps are as follows:
1)Select the Alert Category and Check the Additional configurations and execute it.
2)In the pop-up window,
Under Fixed recipients, give the name of a Fixed Recipient User(the user shd present in su01).
3)And press the Create Alert Button
The e-mail address of the fixed recipients is taken from SU01 (User Management).Plz chk the email id is present there for the recieptents.
Hope it helps.
Regards
Arpit Seth

Can not see 5 security alert on OTN

I can not see following alerts since 5/16/2003 from the URL
http://otn.oracle.com/deploy/security/alerts.htm
Could OTN please check to see what happend?
oracle connection manager control SUID vulnerability
oracle internet directory buffer overflow vulnerabilities
oracle internet application server and web/portal vulnerabilities
oracle enterprise manager backup and recovery vulnerability
oracle SQL*net and net8 listener vulnerability

Thanks- this was fixed.
OTN

Hetrogeneoues connection between Oracle and SQL server

Hi ,
I am having Issues in Making Heterogeneous DB link between Oracle Xe and sql server .
Here is the scenario-
My Oracle and ms SQL 2003 are running on same machine(windows 2003) ,
I have followed this link and reached till 5 but I am not able to tnsping the SQLSERVER DNS entry .
http://www.databasejournal.com/features/oracle/article.php/3442661/Making-a-Connection-from-Oracle-to-SQL-Server.htm
Below are my lintener and tnsfiles
LISTENER.ORA
===========================================================================================================================================================
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = PLSExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
    (SID_DESC =
      (SID_NAME = CLRExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
       (ENVS = "EXTPROC_DLLS=ONLY:C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClr11.dll")
LISTENER =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
      (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
LISTENERSQL =
(ADDRESS_LIST=
      (ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY))
      (ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522))
SID_LIST_LISTENERSQL=
(SID_LIST=
      (SID_DESC =
       (SID_NAME = SQLSRVRDBLNK)
       (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
       (PROGRAM = hsodbc)
===========================================================================================================================================================
TNSNAMES.ORA
XE =
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = testenviroment)(PORT = 1521))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = XE)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
    (CONNECT_DATA =
      (SID = PLSExtProc)
      (PRESENTATION = RO)
ORACLR_CONNECTION_DATA =
(DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
    (CONNECT_DATA =
      (SID = CLRExtProc)
      (PRESENTATION = RO)
SQLSRVRDBLNK =
(DESCRIPTION=
(ADDRESS= (PROTOCOL=tcp)(HOST=localhost)(PORT=1522))
(CONNECT_DATA=(SID=SQLSRVRDBLNK)
(HS=OK)
========================================================================================================================================================
Listner Status
C:\oraclexe\app\oracle\product\11.2.0\server\network\ADMIN>lsnrctl status LISTENERSQL
LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 19-JUL-2013 13:15:59
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Connecting to (ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY))
STATUS of the LISTENER
Alias                     LISTENERSQL
Version                   TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
Start Date                19-JUL-2013 12:17:39
Uptime                    0 days 0 hr. 58 min. 24 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora
Listener Log File         C:\oraclexe\app\oracle\diag\tnslsnr\testenviroment\listenersql\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\PNPKEYipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1522)))
Services Summary...
Service "SQLSRVRDBLNK" has 1 instance(s).
Instance "SQLSRVRDBLNK", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
=========================================================================================================================================================
Now If I try to Tnsping SQL heterogeneous connection , i get
C:\oraclexe\app\oracle\product\11.2.0\server\network\ADMIN>tnsping SQLSRVRDBLNK
TNS Ping Utility for 32-bit Windows: Version 11.2.0.2.0 - Production on 19-JUL-2013 13:17:47
Copyright (c) 1997, 2010, Oracle. All rights reserved.
Used parameter files:
C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION=
TNS-12533: TNS:illegal ADDRESS parameters
Need Help , please suggest
Thanks,
Manish

Hi ,
Thanks for the update I have changed the Listener as suggested , now my Listener File is
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = PLSExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
    (SID_DESC =
      (SID_NAME = CLRExtProc)
      (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
      (PROGRAM = extproc)
    (SID_DESC =
       (SID_NAME = SQLSRVRDBLNK)
       (ORACLE_HOME = C:\oraclexe\app\oracle\product\11.2.0\server)
       (PROGRAM = hsodbc)
       (ENVS = "EXTPROC_DLLS=ONLY:C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClr11.dll")
LISTENER =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS_LIST=
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
      (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.60.146)(PORT = 1521))
      (ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY))
      (ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522)))
========================================================================================================================
and tns entry
SQLSRVRDBLNK =
(DESCRIPTION=
(ADDRESS= (PROTOCOL= TCP)(HOST=192.168.60.146)(PORT=1522))
(CONNECT_DATA=(SID=SQLSRVRDBLNK)
(HS=OK)
========================================================================================================================
Restarted the listener
C:\Documents and Settings\Administrator>lsnrctl start LISTENER
LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 20-JUL-2013 12:27:38
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Starting tnslsnr: please wait...
TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
System parameter file is C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora
Log messages written to C:\oraclexe\app\oracle\diag\tnslsnr\testenviroment\listener\alert\log.xml
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.60.146)(PORT=1521)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\PNPKEYipc)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1522)))
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias                     LISTENER
Version                   TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
Start Date                20-JUL-2013 12:27:44
Uptime                    0 days 0 hr. 0 min. 5 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora
Listener Log File         C:\oraclexe\app\oracle\diag\tnslsnr\testenviroment\listener\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.60.146)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\PNPKEYipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1522)))
Services Summary...
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "SQLSRVRDBLNK" has 1 instance(s).
Instance "SQLSRVRDBLNK", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
========================================================================================================================
Still Getting the same Error
C:\Documents and Settings\Administrator>tnsping SQLSRVRDBLNK
TNS Ping Utility for 32-bit Windows: Version 11.2.0.2.0 - Production on 20-JUL-2013 12:27:52
Copyright (c) 1997, 2010, Oracle. All rights reserved.
Used parameter files:
C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION=
TNS-12533: TNS:illegal ADDRESS parameters
C:\Documents and Settings\Administrator>
========================================================================================================================
Do we need to change any thing in sqlnet.ora file for heterogeneous connection?
Thanks ,
Manish

Connecting from Oracle to SQL Server

Hi
I am now tring to connect from oracle to sql server using database link.
Created database link
but when connecting to remote db getting the floowing error
select * from region@mysqlserverdsn
ERROR at line 1:
ORA-28545: error diagnosed by Net8 when connecting to an agent
Unable to retrieve text of NETWORK/NCR message 65535
ORA-02063: preceding 2 lines from MYSQLSERVERDSN
Can anyone help
My Listener File
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = D:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc1)
(SID_DESC =
(GLOBAL_DBNAME = ORCL.DOMAIN.COM)
(ORACLE_HOME = D:\oracle\product\10.2.0\db_1)
(SID_NAME = orcl)
(SID_DESC =
(GLOBAL_DBNAME = NORTHWIND.DOMAIN.COM)
(ORACLE_HOME = D:\oracle\product\10.2.0\db_1)
(SID_NAME = MYSQLSERVERDSN)
(PROGRAM=hsodbc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST=
(ADDRESS = (PROTOCOL = TCP)(HOST = SALIHKM.DOMAIN.COM)(PORT = 1522))
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
My Tnsnames Entry
MYSQLSERVERDSN =
(DESCRIPTION=
(ADDRESS=(PROTOCOL=tcp)(HOST=xxx.xxx.xxx.xxx)(PORT=1522))
(CONNECT_DATA=(SID=MYSQLSERVERDSN))
(HS=OK)
Lsnrctl is working fine.
c:\>lsnrctl start
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 18-MAY-2006 18:53
:13
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Starting tnslsnr: please wait...
TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Production
System parameter file is D:\oracle\product\10.2.0\db_1\network\admin\listener.or
a
Log messages written to D:\oracle\product\10.2.0\db_1\network\log\listener.log
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=SALIHKM.DOMAIN.COM)(POR
T=1522)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROCipc)
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=SALIHKM.DOMAIN.COM)(POR
T=1522)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Produ
ction
Start Date 18-MAY-2006 18:53:16
Uptime 0 days 0 hr. 0 min. 3 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File D:\oracle\product\10.2.0\db_1\network\admin\listener.o
ra
Listener Log File D:\oracle\product\10.2.0\db_1\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=SALIHKM.DOMAIN.COM)(PORT=1522)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROCipc)))
Services Summary...
Service "NORTHWIND.DOMAIN.COM" has 1 instance(s).
Instance "MYSQLSERVERDSN", status UNKNOWN, has 1 handler(s) for this service..
Service "ORCL.DOMAIN.COM" has 1 instance(s).
Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
But Tnsping show no listener
C:\>tnsping MYSQLSERVERDSN
TNS Ping Utility for 32-bit Windows: Version 10.2.0.1.0 - Production on 18-MAY-2
006 18:56:27
Copyright (c) 1997, 2005, Oracle. All rights reserved.
Used parameter files:
D:\oracle\product\10.2.0\db_1\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION= (ADDRESS=(PROTOCOL=tcp)(HOST=xxx.xxx.xxx.xxx)(P
ORT=1522)) (CONNECT_DATA=(SID=MYSQLSERVERDSN)) (HS=OK))
TNS-12541: TNS:no listener
Services
C:\>lsnrctl services
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 18-MAY-2006 19:00
:04
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=SALIHKM.DOMAIN.COM)(POR
T=1522)))
Services Summary...
Service "NORTHWIND.DOMAIN.COM" has 1 instance(s).
Instance "MYSQLSERVERDSN", status UNKNOWN, has 1 handler(s) for this service..
Handler(s):
"DEDICATED" established:0 refused:0
LOCAL SERVER
Service "ORCL.DOMAIN.COM" has 1 instance(s).
Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0
LOCAL SERVER
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0
LOCAL SERVER
Service "orcl" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:1 refused:0 state:ready
LOCAL SERVER
Service "orclXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Handler(s):
"D000" established:0 refused:0 current:0 max:1002 state:ready
DISPATCHER <machine: SALIHKM, pid: 2080>
(ADDRESS=(PROTOCOL=tcp)(HOST=SALIHKM.DOMAIN.COM)(PORT=1070))
Service "orcl_XPT" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:1 refused:0 state:ready
LOCAL SERVER
The command completed successfully
I am very much confused with this situation.
Thanks & Regards
Salih Km

Hi ,
Thanks for your reply.
Contents of my initMYSQLSERVERDSN.ora file is
# This is a sample agent init file that contains the HS parameters that are
# needed for an ODBC Agent.
# HS init parameters
HS_FDS_CONNECT_INFO = MYSQLSERVERDSN
HS_FDS_TRACE_LEVEL = 0
HS_FDS_TRACE_FILE_NAME = hsmsql.trc
# Environment variables required for the non-Oracle system
#set <envvar>=<value>
set ODBCINI=c:\WINDOWS\ODBC.INI
SALIHKM.DOMAIN.COM is my system in which Oracle Test DB is Installed.
SQL Server is in another location.
In Tnsnames i specified ip address.
One more doubt.
I am using 10g Release 2 demo version.
whether it will support Hetrogeneous Services?
How to know whether a database supports HS or not?
Thanks & Regards
Salih Km

ORA-28546: (oracle to SQL server 2005)

Hi all,
I followed the following below ariticle in dbasupport and dbajournal for about connectivity from Oracle Server 10.1.0.2.0 to SQL Server 2005
http://www.dbasupport.com/oracle/ora10g/connection01.shtml
http://www.databasejournal.com/features/oracle/article.php/3442661/Making-a-Connection-from-Oracle-to-SQL-Server.htm
i configured the listener.ora ,tnsnames.or and inityscco2.ora
$ cat listener.ora
# listener.ora Network Configuration File: /u01/app/oracle/product/101/network/admin/listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = yscc02)
(ORACLE_HOME = /u01/app/oracle/product/101)
(PROGRAM = extproc)
(SID_DESC =
(SID_NAME = yscc02)
(ORACLE_HOME = /u01/app/oracle/product/101)
(PROGRAM = hsodbc)
(ENVS = "LD_LIBRARY_PATH=/u01/app/oracle/product/101/lib32:/usr/lib:/u01/app/oracle/product/101/hs/lib32")
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ysccapps.yamama.com)(PORT = 1521))
LISTENERYSCCAPPS =
(ADDRESS_LIST=
(ADDRESS=(PROTOCOL=tcp)(HOST=100.100.50.5)(PORT=1522))
(ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY)))
SID_LIST_LISTENERYSCCAPPS=
(SID_LIST=
(SID_DESC=
(SID_NAME= yscapps)
(ORACLE_HOME = /u01/app/oracle/product/101 )
(PROGRAM=hsodbc)
$lsnrctl status listener
LSNRCTL for IBM/AIX RISC System/6000: Version 10.1.0.2.0 - Production on 20-JUN-2010 14:03:22
Copyright (c) 1991, 2004, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC)))
STATUS of the LISTENER
Alias listener
Version TNSLSNR for IBM/AIX RISC System/6000: Version 10.1.0.2.0 - Production
Start Date 15-JUN-2010 14:49:05
Uptime 4 days 23 hr. 14 min. 17 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /u01/app/oracle/product/101/network/admin/listener.ora
Listener Log File /u01/app/oracle/product/101/network/log/listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ysccapps.yamama.com)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ysccapps.yamama.com)(PORT=8080))(Presentation=HTTP)(Session=RAW))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ysccapps.yamama.com)(PORT=2100))(Presentation=FTP)(Session=RAW))
Services Summary...
Service "yscc02" has 1 instance(s).
Instance "yscc02", status UNKNOWN, has 2 handler(s) for this service...
Service "yscc02.ysccapps.yamama.com" has 1 instance(s).
Instance "yscc02", status READY, has 1 handler(s) for this service...
Service "yscc02XDB.ysccapps.yamama.com" has 1 instance(s).
Instance "yscc02", status READY, has 1 handler(s) for this service...
The command completed successfully
$ cat tnsnames.ora
# tnsnames.ora Network Configuration File: /u01/app/oracle/product/101/network/a
dmin/tnsnames.ora
# Generated by Oracle configuration tools.
YSCCAPPS1 =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = ysccapps.yamama.com)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SID = yscc02)
(HS = OK)
$tnsping ysccapps1
TNS Ping Utility for IBM/AIX RISC System/6000: Version 10.1.0.2.0 - Production on 20-JUN-2010 14:04:43
Copyright (c) 1997, 2003, Oracle. All rights reserved.
Used parameter files:
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = ysccapps.yamama.com)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SID = yscc02)) (HS = OK))
OK (0 msec)
$ sqlplus new/password@ysccapps1
SQL*Plus: Release 10.1.0.2.0 - Production on Sun Jun 20 14:07:01 2010
Copyright (c) 1982, 2004, Oracle. All rights reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.1.0.2.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SQL>
$ cat inityscc02.ora
This is a sample agent init file that contains the HS parameters that are
# needed for an ODBC Agent.
# HS init parameters
HS_FDS_CONNECT_INFO = yscc02
HS_FDS_TRACE_LEVEL = off
HS_FDS_SHAREABLE_NAME = <full path name of odbc driver manager or driver>
# ODBC specific environment variables
set ODBCINI=<full path name of the odbc initilization file>
and i had created database link like
SQL>create database link ysccapps1
connect to "sa" identified by "passwad"
using 'ysccapps1';
SQL> select * from [email protected];
select 8 from [email protected]
ERROR at line 1:
ORA-28546: connection initialization failed, probable Net8 admin error
ORA-28511: lost RPC connection to heterogeneous remote agent using SID=(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=y
sccapps.yamama.com)(PORT=1521))(CONNECT_DATA=(SERVER=DEDICATED)(SID=yscc02)))
ORA-02063: preceding 2 lines from YSCCAPPS1
Please assist me . i need to periodically pull data from Oracle server to Sql server
Best Regards

First of all please be aware HSODBC has been desupported since 15th of March 2008. When starting a new project you should start with a supported product and this product is called DG4ODBC and it is available as release 11.
Looking at the provided listener it shows several configurations issues.
Have a lokk at yout tnsnames.ora => you mentioned to use the listener servicing port 1521.
This Listener serves 2 SIDs with the same name:
SID_DESC =
(SID_NAME = yscc02)
(ORACLE_HOME = /u01/app/oracle/product/101)
(PROGRAM = extproc)
(SID_DESC =
(SID_NAME = yscc02)
(ORACLE_HOME = /u01/app/oracle/product/101)
(PROGRAM = hsodbc)
(ENVS = "LD_LIBRARY_PATH=/u01/app/oracle/product/101/lib32:/usr/lib:/u01/app/oracle/product/101/hs/lib32")
So when you now connect, the listener does not know which service to spawn. Please check out Metalink note:
Note.238771.1 How to Setup Generic Connectivity - HSODBC - on AIX
when you want to continue using HSODBC although I strongly recommend you to use DG4ODBC which is configured as mentioned in Metalink note:
Note.561033.1 How to Setup DG4ODBC on 64bit Unix OS (Linux, Solaris, AIX, HP-UX)

Wrong PDF on Security Alerts Page

On the Security Alerts page (http://otn.oracle.com/deploy/security/alerts.htm) there is a link next to "Buffer Overflow Vulnerability in Oracle9iAS Reports Server Alert #35, 05 June 2002" which links to a document called http://otn.oracle.com/deploy/security/pdf/reports6i_alert.pdf
This document is actually a copy of the document for a different vulnerability "Buffer Overflow Vulnerability in Oracle Net (Oracle9i Database Server) Alert #34, 05 June 2002"
Please fix it so we can read about the 9iAS Reports Server Alert!
Thanks,
-Otto

Hi Otto,
This should now be fixed on OTN but please let us know if you encounter any difficulties.
Regards,
OTN Team

Error connection Oracle to SQL Server using tg4msql, HELP Please....

Hi, my name is Gregory,
I am a newbie in oracle forum here, and need some help from the database guru here...
I am trying to create the database link from Oracle database to SQL Server.
here are the information:
host name of OracleDB = a3500
host name/Ip of SQL Server = 172.16.1.58
SQL Server database name = CKS_VSSD
i had create the new initntchsql.ora file under tg4msql\admin folder, and i also had create the new listener.
here is the file contains
############ initntchsql.ora ###################
HS_FDS_CONNECT_INFO="SERVER=172.16.1.58;DATABASE=CKS_VSSD"
HS_FDS_TRACE_LEVEL=OFF
HS_FDS_RECOVERY_ACCOUNT=RECOVER
HS_FDS_RECOVERY_PWD=RECOVER
############ listener.ora ######################
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = a3500)(PORT = 1521))
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
(ADDRESS LIST=
(ADDRESS = (PROTOCOL = TCP)(HOST = a3500)(PORT = 1521))
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = C:\oracle\ora92)
(PROGRAM = extproc)
(SID_DESC =
(GLOBAL_DBNAME = orclems)
(ORACLE_HOME = C:\oracle\ora92)
(SID_NAME = orclems)
(SID_DESC =
(GLOBAL_DBNAME = cps4)
(ORACLE_HOME = C:\oracle\ora92)
(SID_NAME = cps4)
(SID_DESC =
(PROGRAM = tg4msql)
(SID_NAME = NTCHSQL)
(ORACLE_HOME = C:\Oracle\Ora92)
#################### tnsnames.ora #################
NTCHSQL =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = a3500)(PORT = 1521))
(CONNECT_DATA =
(SID = NTCHSQL)
(HS = OK)
and i had created databaselink named ntchsql
then i select statement:
select * from vssd50@ntchsql
and error occured:
ORA-02068: Following severe error from NTCHSQL
ORA-28511: lost RPC connection to heterogenous remote agent using SID=%s
ORA-28509: unable to establish a connection to non-Oracle system
did i missed something on the configuration?
oya... i also see other thread that said i have to comment
SQLNET.AUTHENTICATION_SERVICES = (NTS)
from sqlnet.ora file, and i did that, and the error still the same...
can somebody help me?

sorry my fault hehehee....
here is the lsnrctl stat
LSNRCTL> stat
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=a3500)(PORT=1521))(ADDRE
SS LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=a3500)(PORT=1521))))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 9.2.0.4.0 - Produc
tion
Start Date 16-FEB-2006 15:30:24
Uptime 0 days 0 hr. 26 min. 57 sec
Trace Level off
Security OFF
SNMP OFF
Listener Parameter File C:\oracle\ora92\network\admin\listener.ora
Listener Log File C:\oracle\ora92\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=a3500)(PORT=1521))(ADDRESS LIST=(ADD
RESS=(PROTOCOL=TCP)(HOST=a3500)(PORT=1521))))
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC0ipc))(ADDRESS L
IST=(ADDRESS=(PROTOCOL=TCP)(HOST=a3500)(PORT=1521))))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=a3500)(PORT=8080))(Presentation=HTTP
)(Session=RAW))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=a3500)(PORT=2100))(Presentation=FTP)
(Session=RAW))
Services Summary...
Service "NTCHSQL" has 1 instance(s).
Instance "NTCHSQL", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "cps4" has 2 instance(s).
Instance "cps4", status UNKNOWN, has 1 handler(s) for this service...
Instance "cps4", status READY, has 1 handler(s) for this service...
Service "cps4XDB" has 1 instance(s).
Instance "cps4", status READY, has 1 handler(s) for this service...
Service "orclems" has 1 instance(s).
Instance "orclems", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
thanks for helping.... :-)

JS Validation for Drop down List is not working in Oracle PL/SQL Package

Hi All,
I am facing an issue with JavaScript validation done in Oracle PL SQL package.
System Requirement:
There is one screen which contains two fields viz. FLD 1 & FLD 2 and one 'Submit' button.
FLD 1 and FLD 2 fields are drop down list boxes.These are mandatory fields.
The screen is developed in Oracle Mod PL SQL package.
The html coding and java scripting are embedded in the respective Oracle PL SQL Package procedure which generates this screen,takes the input values provided by user,does the
field validations and submits the form.
Issue:
The javascript validation for FLD 2 dropdown is working successfully.
When the user leaves this field as blank,the embedded javascript pops up an error message 'Selection of FLD 2 is manadatory before submitting the form!'.
As FLD 1 is also a mandatory field,the javascripting validation should pop up the similar error message 'Selection of FLD 1 is manadatory before submitting the form!'.
But,this first field validation is not at all working.
The system allows to submit the form even if the 'FLD 1' is left blank.
The javascript code sysntax for validation of FLD 1 & FLD 2 drop down list boxes as follows:
function validate_form_fields()
if (document.forms[0].p_fld_1.selectedIndex == 0))) || (document.forms
[0].p_fld_1.selectedIndex < 1 )
alert("Selection of FLD 1 is manadatory before submitting the form!!!");
return false;
else if (document.forms[0].p_fld_2.selectedIndex == 0))) || (document.forms
[0].p_fld_2.selectedIndex < 1 )
alert("Selection of FLD 2 is manadatory before submitting the form!!!");
return false;
return true;
I am viewing the screen from the web browser IE version 8.0.
Your timely help will really be appreciated.
Regards & Thanking in advance,
Alka

Hi,
1. Your problem is actually related to JavaScript, not SQL and PL/SQL. So, this is the wrong forum to post. The closest to JS is the Application Express forum {forum:id=137}. Clearly state that it is not an Apex issue and that you are looking for JS help.
2. Your JS code, the way you has posted it, is syntactically incorrect, so if you post on Apex forum put the correct code and in tags as described in the FAQ
{quote}
function validate_form_fields()
if (document.forms[0].p_fld_1.selectedIndex == 0))) || (document.forms
[0].p_fld_1.selectedIndex < 1 )
alert("Selection of FLD 1 is manadatory before submitting the form!!!");
return false;
else if (document.forms[0].p_fld_2.selectedIndex == 0))) || (document.forms
[0].p_fld_2.selectedIndex < 1 )
alert("Selection of FLD 2 is manadatory before submitting the form!!!");
return false;
return true;
{quote}
Regards,

Oracle to SQL server connection - not working

Hi Friends,
OS version : R Linux EL5
Oracle version : 10.2.0.4
i had followed http://www.databasejournal.com/features/oracle/article.php/10893_3442661_2/Making-a-Connection-from-Oracle-to-SQL-Server.htm document and modified tnsnames.ora, listener.ora files in HS directory.
when i tried to start new listener, its throwing following error
*+[oracle@viadbscph802v admin]$ lsnrctl start LISTENERMSCRM_CONFIGDSN+*
LSNRCTL for Linux: Version 10.2.0.4.0 - Production on 30-MAR-2010 08:35:08*
Copyright (c) 1991, 2007, Oracle. All rights reserved.*
Starting /opt/oracle/protas/product/10.2.0/db/bin/tnslsnr: please wait...*
TNSLSNR for Linux: Version 10.2.0.4.0 - Production*
System parameter file is /opt/oracle/protas/product/10.2.0/db/network/admin/listener.ora*
Log messages written to /opt/oracle/protas/product/10.2.0/db/network/log/listenermscrm_configdsn.log*
TNS-01151: Missing listener name, LISTENERMSCRM_CONFIGDSN, in LISTENER.ORA*
Listener failed to start. See the error message(s) above...*
my listener.ora entry is as below
*+[oracle@viadbscph802v admin]$ more listener.ora+*
+# This is a sample listener.ora that contains the NET8 parameters that are+
+# needed to connect to an HS Agent+
LISTENERMSCRM_CONFIGDSN =*
+(ADDRESS_LIST=+
+(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522))+
+(ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY)))+
SID_LIST_LISTENER=*
+(SID_LIST=+
+(SID_DESC=+
+(SID_NAME=MSCRM_CONFIGDSN)+
+(ORACLE_HOME=/opt/oracle/protas/product/10.2.0/db)+
+(PROGRAM=hsodbc)+
+)+
+)+
+#CONNECT_TIMEOUT_LISTENER = 0+
when i do tnsping, it is showing following error
*+[oracle@viadbscph802v admin]$ tnsping mscrm_configdsn+*
TNS Ping Utility for Linux: Version 10.2.0.4.0 - Production on 30-MAR-2010 08:49:32*
Copyright (c) 1997, 2007, Oracle. All rights reserved.*
Used parameter files:*
TNS-03505: Failed to resolve name*
my tnsnames.ora entry is as below
*+[oracle@viadbscph802v admin]$ more tnsnames.ora+*
+# This is a sample tnsnames.ora that contains the NET8 parameters that are+
+# needed to connect to an HS Agent+
+#hsagent =+
+# (DESCRIPTION=+
+#    (ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1521))+
+#    (CONNECT_DATA=(SID=hsagent))+
+#    (HS=)+
+# )+
MSCRM_CONFIGDSN =*
+(DESCRIPTION=+
+(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522))+
+(CONNECT_DATA=(SID=MSCRM_CONFIGDSN))+
+(HS=OK)+
+)+
my GLOBAL_NAMES is set to flase
Please help me in resolving this problem.
i have a doubt, should we have oracle client software to be installed on machine which is running sql server?
thanks in advance

[oracle@viadbscph802v admin]$ lsnrctl status LISTENERMSCRM_CONFIGDSN
LSNRCTL for Linux: Version 10.2.0.4.0 - Production on 30-MAR-2010 14:38:32
Copyright (c) 1991, 2007, Oracle. All rights reserved.
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=viadbscph802v)(PORT=1522))
STATUS of the LISTENER
Alias LISTENERMSCRM_CONFIGDSN
Version TNSLSNR for Linux: Version 10.2.0.4.0 - Production
Start Date 30-MAR-2010 12:41:17
Uptime 0 days 1 hr. 57 min. 15 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /opt/oracle/protas/product/10.2.0/db/network/admin/listener.ora
Listener Log File /opt/oracle/protas/product/10.2.0/db/network/log/listenermscrm_configdsn.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=viadbscph802v.no.via.as)(PORT=1522)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY)))
Services Summary...
Service "MSCRM_CONFIGDSN" has 1 instance(s).
Instance "MSCRM_CONFIGDSN", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
[oracle@viadbscph802v admin]$ tnsping MSCRM_CONFIGDSN
TNS Ping Utility for Linux: Version 10.2.0.4.0 - Production on 30-MAR-2010 14:38:40
Copyright (c) 1997, 2007, Oracle. All rights reserved.
Used parameter files:
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION= (ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522)) (CONNECT_DATA=(SID=MSCRM_CONFIGDSN)) (HS=OK))
OK (0 msec)
below are listener.ora and tnsnames.ora entries
LISTENERMSCRM_CONFIGDSN =
(ADDRESS_LIST=
(ADDRESS=(PROTOCOL=tcp)(HOST=viadbscph802v)(PORT=1522))
(ADDRESS=(PROTOCOL=ipc)(KEY=PNPKEY)))
SID_LIST_LISTENERMSCRM_CONFIGDSN =
(SID_LIST=
(SID_DESC=
(SID_NAME=MSCRM_CONFIGDSN)
(ORACLE_HOME = /opt/oracle/protas/product/10.2.0/db/)
(PROGRAM=hsodbc)
MSCRM_CONFIGDSN =
(DESCRIPTION=
(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522))
(CONNECT_DATA=(SID=MSCRM_CONFIGDSN))
(HS=OK)
)

Security Alert #29 Oracle PL/SQL EXTPROC vulnerability

Similar Messages

Maybe you are looking for