RE: password

I suppose I should have included that I tested this on 8.1.7.4.0 on HP/UX and 8.0.5.0.1 on OpenVMS, and the same passwords hash to the same values in each. I wonder if it's different for other versions. 7? 9? 10??? :)

Rich

Rich Jesse                           System/Database Administrator
Rich.Jesse_at_qtiworld.com              Quad/Tech International, Sussex, WI USA

> -----Original Message-----
> From: Jesse, Rich
> Sent: Tuesday, December 17, 2002 3:31 PM
> To: 'Jared.Still_at_radisys.com'; ORACLE-L_at_fatcity.com
> Subject: RE: password
>
>
> Well, that's the default password. Is the *hash* the same, though?
>
> Someone had mentioned that they thought it was DB-dependant.
> That can't be, since I can copy a DB, change the name, and
> fire it up without changing the password.
>
> Rich
>
>
> Rich Jesse System/Database Administrator
> Rich.Jesse_at_qtiworld.com Quad/Tech International,
> Sussex, WI USA
>
>
> > -----Original Message-----
> > From: Jared.Still_at_radisys.com [mailto:Jared.Still_at_radisys.com]
> > Sent: Tuesday, December 17, 2002 3:01 PM
> > To: ORACLE-L_at_fatcity.com
> > Cc: Jesse, Rich
> > Subject: RE: password
> >
> >
> > > Does "CHANGE_ON_INSTALL" have the same hash value for every
> > > version and every instance?
> >
> > Yes, it does.
> >
> > Check: http://www.pentest-limited.com/default-user.htm
> >
> > This is a pentest list of default Oracle passwords.
> >
> > I've used this to create a perl script that checks for
> > default passwords.
> >
> > It doesn't matter which version of Oracle.
> >
> > Jared

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jesse, Rich
  INET: Rich.Jesse_at_qtiworld.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).