Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Risk of knowing password hash value (Was: OEM permissions)

Re: Risk of knowing password hash value (Was: OEM permissions)

From: rahul sharma <rahul_at_infotech.co.id>
Date: Mon, 22 Dec 2003 22:14:25 -0800
Message-ID: <F001.005DACD5.20031222221425@fatcity.com>


8.1.7 on win2000

SQL> select password
  2 from dba_users
  3 where username = 'SCOTT';

PASSWORD



F894844C34402B67

> Hi,
>
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
>
> 1) What does anyone/everyone get for my this query (my
> results shown):
>
> connect system/blah_at_blah;
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
>
> PASSWORD
> ----------------
> F894844C34402B67
>
> 2) If you all get the same, then I'm concerned.
>
> Regards,
>
> Mike Thomas
>
> --- Yong Huang <yong321_at_yahoo.com> wrote:
> > Jared,
> >
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> >
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> >
> > Yong Huang
> >
> > --- Jared Still <jkstill_at_cybcon.com> wrote:
> > > Environment:
> > >
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > >
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > >
> > > SYSTEM user on each database initially have
> > different passwords.
> > >
>
>
> __________________________________
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Michael Thomas
> INET: mhthomas_at_yahoo.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: rahul sharma
  INET: rahul_at_infotech.co.id

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Tue Dec 23 2003 - 00:14:25 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US