A potential security vulnerability has been discovered in the TO_TIMESTAMP_TZ function of Oracle9i Database.

This story continues at http://www.databasejournal.com/news/article.php/1585461