Anonymous User [message #254364] |
Thu, 26 July 2007 10:21 |
preet_kumar
Messages: 204 Registered: March 2007
|
Senior Member |
|
|
On a default installation of Oracle 10g.
select username,password,account_status from dba_users;
This shows me a user name Anonymous with password anonymous and status Expired and Locked.
When i tried to connect to the database using
connect anonymous as sysdba and password as anonymous it works
Is it not a security risk?
[Updated on: Thu, 26 July 2007 10:44] Report message to a moderator
|
|
|
|
Re: Anonymous User [message #254374 is a reply to message #254367] |
Thu, 26 July 2007 11:07 |
preet_kumar
Messages: 204 Registered: March 2007
|
Senior Member |
|
|
Thanks
Yes i can connect with anything as sysdba and any password and when i issue show user; it shows me as user SYS.
Then whats the difference connecting sys as sysdba? when i can connect with any username as sys
|
|
|
|
|