The general rule for any string to date (and vice versa) conversion shoul be:

NEVER RELY ON DEFAULT DATE FORMAT (whther on server or on client side)!!!!!!

Always (without exception!) use explicite TO_DATE/TO_CHAR conversion with proper format mask. Oracle has to perform conversion in any case, so it is better that you tell it in advance what format mask it should use.