Forum OpenACS Q&A: Response to Bugtraq: Remote Compromise in Oracle 9i Database Server (and Oracle 8)

I would phrase that

"if you're not behind a firewall, get behind a firewall.  Anyone purchasing
Oracle absolutely has the money to do that.  here are steps you need to take
to secure your Oracle installation against attacks on the internal network.
This is not a guarantee that your system will be secure, but it should help..."