Re: Anyone have a copy of DUL ??

You can't bypass Oracle security (well if configured and patched well) from remote with any tools (at least I surely hope so that there wouldn't be any backdoors). There is no magic tool which can log on to Oracle without password from remote and start scanning all the datafiles. This DUL works only when having direct access to datafile itself! This means direct access, not even some sysdba remote login.
So there is no more security risk in letting a user access the physical datafile with DUL than with vi editor. In latter case one just has to work more to figure out the physical data structure.

Tanel.

• Original Message ----- To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com> Sent: Thursday, September 18, 2003 7:35 PM

> One problem I see with giving this away "free" is that you will be
supplying
> a tool that allows you to extract data from the database, bypassing all
> inbuilt security. A BIG "no no". I suppose that also applies to this kind
of
> tool even under a paid license structure.
>
> How many of you would shout at Cool-Tools for "giving away" a tool such as
> this, that your developers can use to "hack" your data files? ;)
>
> Nice idea in concept - huge liability it reality.
>
>
> -----Original Message-----
> Rachel Carmichael
> Sent: 18 September 2003 17:15
> To: Multiple recipients of list ORACLE-L
>
>
> 1) it's Field Support not Tech Support that has it
> 2) Oracle does not sell nor does it release the code for DUL. A field
> support technician comes to your site, installs it, runs it and removes
> it. You pay a fee for this. when I used it (in '98), the fee was $5k
> per every 8 hour period, with a minimum of $10K as the starting fee.
>
>
> --- Juan Miranda <j.miranda_at_sermatica.es> wrote:
> > I do it but there say don4t have DUL
> >
> > -----Mensaje original-----
> > De: ml-errors_at_fatcity.com [mailto:ml-errors_at_fatcity.com]En nombre de
> > Tanel Poder
> > Enviado el: jueves, 18 de septiembre de 2003 15:50
> > Para: Multiple recipients of list ORACLE-L
> > Asunto: Re: Anyone have a copy of DUL ??
> >
> >
> > Call Oracle Support ;)
> >
> > Tanel.
> > ----- Original Message -----
> > To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
> > Sent: Thursday, September 18, 2003 3:39 PM
> >
> >
> > >
> > >
> > > There are DUL?s manual.
> > > http://www.fors.com/velpuri2/dul_ucg8.html
> > >
> > > May be interesting for someone.
> > >
> > >
> > > -----Mensaje original-----
> > > De: ml-errors_at_fatcity.com [mailto:ml-errors_at_fatcity.com]En nombre
> > de
> > > Pete Finnigan
> > > Enviado el: jueves, 18 de septiembre de 2003 13:55
> > > Para: Multiple recipients of list ORACLE-L
> > > Asunto: Re: How to extract data directly from a datafile ?
> > >
> > >
> > > Hi Tanel,
> > >
> > > A free DUL in C would be very nice to have and to study the source
> > code
> > > of. maybe you should also contact Kurt van Meerbeek of jDUL project
> > on
> > > sourceforge, maybe you have some ideas or info he doesn't have that
> > > could help his efforts or of course Richard's efforts.
> > >
> > > kind regards
> > >
> > > Pete
> > > --
> > > Pete Finnigan
> > > email:pete_at_petefinnigan.com
> > > Web site: http://www.petefinnigan.com - Oracle security audit
> > specialists
> > > Book:Oracle security step-by-step Guide - see http://store.sans.org
> > for
> > > details.
> > >
> > > --
> > > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > > --
> > > Author: Pete Finnigan
> > > INET: oracle_list_at_peterfinnigan.demon.co.uk
> > >
> > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > > San Diego, California -- Mailing list and web hosting
> > services
> > >
> > ---------------------------------------------------------------------
> > > To REMOVE yourself from this mailing list, send an E-Mail message
> > > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > > the message BODY, include a line containing: UNSUB ORACLE-L
> > > (or the name of mailing list you want to be removed from). You may
> > > also send the HELP command for other information (like
> > subscribing).
> > >
> > > --
> > > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > > --
> > > Author: Juan Miranda
> > > INET: j.miranda_at_sermatica.es
> > >
> > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > > San Diego, California -- Mailing list and web hosting
> > services
> > >
> > ---------------------------------------------------------------------
> > > To REMOVE yourself from this mailing list, send an E-Mail message
> > > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > > the message BODY, include a line containing: UNSUB ORACLE-L
> > > (or the name of mailing list you want to be removed from). You may
> > > also send the HELP command for other information (like
> > subscribing).
> > >
> >
> > --
> > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > --
> > Author: Tanel Poder
> > INET: tanel.poder.003_at_mail.ee
> >
> > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > San Diego, California -- Mailing list and web hosting services
> > ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
> >
> > --
> > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > --
> > Author: Juan Miranda
> > INET: j.miranda_at_sermatica.es
> >
> > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > San Diego, California -- Mailing list and web hosting services
> > ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Rachel Carmichael
> INET: wisernet100_at_yahoo.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.515 / Virus Database: 313 - Release Date: 01/09/2003
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.515 / Virus Database: 313 - Release Date: 01/09/2003
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Mark Leith
> INET: mark_at_cool-tools.co.uk
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Tanel Poder
  INET: tanel.poder.003_at_mail.ee

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).