RE: Protecting the listener with a password

From: William Beilstein <BeilstWH_at_OBG.com>
Date: Mon, 08 Jan 2001 10:48:05 -0500
Message-Id: <10735.125986@fatcity.com>

The password was put in because of a security hole. It was found that a = user connecting to the listener could issue a restart with command line = options to hack the listener. If the password is put in, you can only = start and stop or restart the listener if you are running (Telnet or = console) on the server.

>>> "Koivu, Lisa" <lkoivu_at_qode.com> 01/08/01 09:40AM >>>
Hi Stephane,=20

I remember this from class - that was the only function the password protects. =20
Kinda silly. =20

I hope your morning gets better fast! No coffee must be miserable.

Lisa Rutland Koivu
Oracle Database Administrator
Qode.com
4850 North State Road 7
Suite G104
Fort Lauderdale, FL 33319

V: 954.484.3191, x174
F: 954.484.2933=20
C: 954.658.5849

http://www.qode.com=20

"The information contained herein does not express the opinion or position of Qode.com and cannot be attributed to or made binding upon Qode.com."

-----Original Message-----
Sent: Monday, January 08, 2001 8:21 AM
To: Multiple recipients of list ORACLE-L

Hi,

I've tested the password protection on the listener (Oracle 816/Solaris) and it's not clear to me what gain I have (I have a cold, it's monday and the coffee machine is broke again) beside the fact that nobody can stop the listener without the password.

TIA =3D=3D=3D=3D=3D
Stephane Paquette
DBA Oracle
stephane_paquette_at_yahoo.com=20

Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/=20
--=20
Please see the official ORACLE-L FAQ: http://www.orafaq.com=20 --=20
Author: =3D?iso-8859-1?q?paquette=3D20stephane?=3D INET: stephane_paquette_at_yahoo.com=20

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Jan 08 2001 - 09:48:05 CST