Forum OpenACS Q&A: Response to Bugtraq: Remote Compromise in Oracle 9i Database Server (and Oracle 8)

Ideally, this type of security stuff should be stuffed in our documentation at some point too.

"if you're not behind a firewall, here are steps you need to take to secure your Oracle installation. This is not a guarantee that your system will be secure, but it should help..."