At least two third-party security vendors think so.

This story continues at
http://www.dbasupport.com/oracle/new...Security.shtml