An Assessment of the Oracle Password Hashing Algorithm

Read this...

http://isc.sans.org/diary.php?storyid=793
SANS - Internet Storm Center - Cooperative Cyber Threat Monitor An Alert System

then this...