Re: Adding some random characters to Oracle password

From: Pete Finnigan <plsql_at_petefinnigan.com>
Date: Thu, 28 Oct 2004 08:27:23 +0100
Message-ID: <2uTBBoBb9JgBRxjZ@peterfinnigan.demon.co.uk>

>Also, you might want to look at using the disabling options in the Product User
>Profile Table:
>
>http://download-west.oracle.com/docs/cd/B10501_01/server.920/a90842/ch10.htm#100
>5648

Hi,

the product user profile table is not much use. It only works for SQL*plus so you can instead bypass with TOAD, PL/SQL developer..... Also even using SQL*Plus it can be bypassed easily.

Kind regards

Pete

-- 
Pete Finnigan (email:pete_at_petefinnigan.com)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

Received on Thu Oct 28 2004 - 02:27:23 CDT