600 Oracle default usernames/passwords available

From: Pete Finnigan <oracle_list_at_peterfinnigan.demon.co.uk>
Date: Tue, 16 Nov 2004 20:39:09 +0000
Message-ID: <zoL8yeAtVmmBBxDi@peterfinnigan.demon.co.uk>

Hi Everyone,

I have just added a page to my site that lists 596 default Oracle users and their passwords. The list is available as HTML, CSV, SQL insert statements to load the data into a table, MS Excel spreadsheet and Open Office spreadsheet. The list can be used to audit your database for existing default accounts and to check that their passwords are not still the defaults.

I have also updated the default password check script archive to include the much bigger list of default users.

The Oracle default password lists can be found here:- http://www.petefinnigan.com/default/default_password_list.htm and the tool to check for default passwords can be found here:- http://www.petefinnigan.com/default/default_password_checker.htm

kind regards

Pete
--

Pete Finnigan (email:pete_at_petefinnigan.com) Web site: http://www.petefinnigan.com - Oracle security audit specialists Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

--

http://www.freelists.org/webpage/oracle-l Received on Tue Nov 16 2004 - 15:31:34 CST