Forum OpenACS Q&A: Response to Bugtraq: Remote Compromise in Oracle 9i Database Server (and Oracle 8)

AFAICT, 8.1.7 uses EXTPROC too, on Linux at least.  I haven't actually tried *not* using it, but it's created as usual by the Net8 assistant.