Harry Johnston has reported a security issue in Oracle Database Server 10g, which potentially can be exploited by malicious people to compromise a user's system.

This story continues at
http://www.dbasupport.com/oracle/news/sec16577.shtml