LISTENER的安全隐患！？

[enli]

最近拿到一个服务器的安全报告里面有这么一段：
2级红色威胁：Oracle Listener Discloses Absolute Path and Environment Variables port 1521/tcp
QID: 19017
Category: Database
CVE ID: -
Vendor Reference: -
Bugtraq ID: -
Modified: 11/04/2005
Edited: No
THREAT:
The Listener daemon is used to communicate with the Oracle database. By sending a specific listener command, it is possible to obtain the absolute path of the
Oracle binary as well as the list of environment variables.
IMPACT:
An unauthorized user can gather information about the system, which may aid in further attacks.
SOLUTION:
There is no available patch for this problem. Access to the Oracle database should be restricted by firewalling port 1521 (listener port) to prevent outsiders from
gathering such information.
COMPLIANCE:
Not Applicable
RESULTS:
PATH = D:\oracle\ora92\network\log\listener.log
ENVIRONMENT = 'ORACLE_HOME=D:\oracle\ora92,ORACLE_SID=SECTSDB001'
ENVIRONMENT = 'ORACLE_HOME=D:\oracle\ora92,ORACLE_SID=PLSExtProc'

我想问的是
1.如何从1521端口来得到报告中的RESULTS，就是发什么命令可以得到？
2.如何屏蔽它，以消除安全隐患？？？？

[meiZiNick]

什么呀