On October 31, 2005, a PL/SQL worm program was published in the Internet. This worm program called “Oracle Worm Voyager” is relatively harmless and luckily hardly causes any damage. However, variants of this program have been developed and published since then. Therefore, further developments are to be expected which may possibly cause more harm.

Due to this situation, Oracle and SAP decided to check the current security level of their Oracle database and to evaluate further possible actions to increase the security and to prevent such attacks against the Oracle database.

You can implement most of the actions described in this note quickly and without any problems. They are adjusted to the SAP application and do not affect the functions of the SAP system.

This note is intended to support you in taking the required and correct measures to increase the database security.