Oracle-L: Re:RE: password

From: <dgoulet_at_vicr.com>
Date: Wed, 18 Dec 2002 07:34:37 -0800
Message-ID: <F001.0051CD28.20021218073437@fatcity.com>

Try this sql script:

/*

DBA Skeleton Key
*
This script will allow one to crash into any Oracle account.
The only restriction is that the invoker must have the
'alter any user' system priviledge.
*/

accept usrname char prompt 'Enter account name to crack: ' set verify off
break on name
column gname new_value _name noprint
select substr(global_name,1,instr(global_name,'.')-1)gname from global_name;
clear breaks
break on password
column password new_value _pwd noprint
select password from dba_users
where username = upper('&usrname');
alter user &usrname identified by dummy; connect &usrname/dummy@&_name
alter user &usrname identified by values '&_pwd'; @login

____________________Reply Separator____________________
Author: "Mark Leith" <mark_at_cool-tools.co.uk>
Date:       12/17/2002 3:34 AM

Check the post-it note on their monitor?

:)
  -----Original Message-----
  From: root_at_fatcity.com [mailto:root_at_fatcity.com]On Behalf Of Paulo Gomes   Sent: 17 December 2002 10:55
  To: Multiple recipients of list ORACLE-L   Subject: RE: password

he can't but he can change it to a new one and then put the old back on -----Original Message-----
From: faisal ahmad [mailto:faisalahmad4u_at_hotmail.com] Sent: terça-feira, 17 de Dezembro de 2002 4:09 To: Multiple recipients of list ORACLE-L Subject: password

how can a dba see the password of a user.

The new MSN 8: smart spam protection and 2 months FREE* -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: faisal ahmad INET: faisalahmad4u_at_hotmail.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting

services -------------------------------------------------------------------

-- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.3510.1100" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN class=923033611-17122002>Check

the post-it note on their monitor? </SPAN></FONT></DIV> <DIV><FONT color=#0000ff face=Arial size=2><SPAN class=923033611-17122002></SPAN></FONT> </DIV> <DIV><FONT color=#0000ff face=Arial size=2><SPAN class=923033611-17122002>:)</SPAN></FONT></DIV> <BLOCKQUOTE style="MARGIN-RIGHT: 0px">
  <DIV align=left class=OutlookMessageHeader dir=ltr><FONT face=Tahoma   size=2>-----Original Message-----<BR><B>From:</B> root_at_fatcity.com   [mailto:root_at_fatcity.com]<B>On Behalf Of </B>Paulo Gomes<BR><B>Sent:</B> 17   December 2002 10:55<BR><B>To:</B> Multiple recipients of list   ORACLE-L<BR><B>Subject:</B> RE: password<BR><BR></DIV></FONT>   <DIV><FONT color=#0000ff face=Arial size=2><SPAN class=201495710-17122002>he   can't but he can change it to a new one and then put the old back   on</SPAN></FONT></DIV>
  <BLOCKQUOTE>
    <DIV align=left class=OutlookMessageHeader dir=ltr><FONT face=Tahoma     size=2>-----Original Message-----<BR><B>From:</B> faisal ahmad     [mailto:faisalahmad4u_at_hotmail.com]<BR><B>Sent:</B> terça-feira, 17 de     Dezembro de 2002 4:09<BR><B>To:</B> Multiple recipients of list     ORACLE-L<BR><B>Subject:</B> password<BR><BR></DIV></FONT>

    <DIV>
    <DIV>how can a dba see the password of a user.</DIV></DIV><BR clear=all>
    <HR>

services

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list

you want to be removed from). You may also send the HELP command for other information (like subscribing). </BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: dgoulet_at_vicr.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Wed Dec 18 2002 - 09:34:37 CST