Oracle Database Server 'TNS Listener'远程数据投毒漏洞（CVE-2012-1675）

一、解决方案

1. RAC：My Oracle Support Note 1340831.1

2. 非 RAC：My Oracle Support Note 1453883.1

二、简单举例：非 RAC 操作步骤，1453883.1文档中

解决方案分两种

1. Restricting registration to the TCP protocol (Requires the fix for BUG:12880299)

2. Restricting registration to the IPC protocol (The patch for BUG:12880299 is NOT required for the IPC method)

本例采用第一种方式修复bug

1. Obtain and apply the patch for bug:12880299.
   此处建议打最新的PSU

2. 添加"SECURE_REGISTER_[listener_name] = (TCP)"
   
   

   LISTENER_PROD =  (DESCRIPTION_LIST =    (DESCRIPTION =      (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.66.101)(PORT = 1521))    ))SECURE_REGISTER_LISTENER_PROD = (TCP)

3. 重启监听
   
   

4. 设置local_listener 参数

5. 注册监听
   

   SQL> alter system register;