The first public proof-of-concept of an Oracle database worm has been posted to the Full-disclosure mailing list.

Oracle DB Worm Code Published