If you're checking your datbase grants to public, be sure to check dbms_snapshot_utl, not dbms_snapshot_util as listed in the red-database-security.com document. Jay -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Stell Sent: Wednesday, April 19, 2006 8:46 AM To: oracle-l Subject: April CPU http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html -- //www.freelists.org/webpage/oracle-l **DISCLAIMER This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received this communication in error, please notify the sender and delete this e-mail message. The contents do not represent the opinion of D&E except to the extent that it relates to their official business. -- //www.freelists.org/webpage/oracle-l