Oracle 10g's latest buffer overflow bug is yet to be patched, & now there's exploit code in the wild. Yay.

"The vulnerability was first disclosed yesterday by VeriSign Inc.'s iDefense Labs, which issued an advisory outlining the flaw in Oracle Database 10gR2. Earlier versions of the enterprise database software may also be at risk, iDefense cautioned."