The Oracle critical patch update released in April 2005 has failed to fix all of the vulnerabilities it claimed to have negated.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38540/oracleFailed.txt
Source: https://packetstormsecurity.com/files/38540/oracleFailed.txt.html