RE: Risk of knowing password hash value (Was: OEM permissions)

From: Norris, Gregory T [ITS] <gregory.t.norris_at_mail.sprint.com>
Date: Tue, 23 Dec 2003 07:19:25 -0800
Message-ID: <F001.005DAE73.20031223071925@fatcity.com>

Same here...

SQL> select password from dba_users where username = 'SCOTT';

PASSWORD

F894844C34402B67

-----Original Message-----

Michael Thomas
Sent: Monday, December 22, 2003 10:44 PM To: Multiple recipients of list ORACLE-L

Hi,

Okay. I'm almost a believer of this as a problem. How about 9.2.0.4 on RH9.3.

What does anyone/everyone get for my this query (my results shown):

connect system/blah_at_blah;
alter user scott identified by tiger;
--

select password
from dba_users
where username = 'SCOTT';

PASSWORD

F894844C34402B67

2) If you all get the same, then I'm concerned.

Regards,

Mike Thomas
--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Norris, Gregory T [ITS]
INET: gregory.t.norris_at_mail.sprint.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Tue Dec 23 2003 - 09:19:25 CST