Re: Funny sort of question re sys password

From: Mladen Gogala <mladen_at_wangtrading.com>
Date: Wed, 10 Mar 2004 10:21:45 -0500
Message-ID: <20040310152145.GE1761@mladen.wangtrading.com>

On 03/10/2004 09:46:39 AM, Pete Finnigan wrote:

> You are right for those ideas that involve finding passwords through
> various means could be social engineering But what i was really thinking
> of was running various commands as a non DBA user and changing the SYS
> password and then having access as SYS - those methods are not social
> engineering but hacking. I am trying to be vague as its not a good idea
> to show people in a public forum how to hack.

Well, some of those people could show you some decent tricks. Let's say that there are versions of oracle in which the table behind DBA_DB_LINKS stores unencrypted ASCII.... Oh, well. You ar right, it's not nice.

Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Wed Mar 10 2004 - 09:23:39 CST