Re: Funny sort of question re sys password

  • From: Mladen Gogala <mladen@xxxxxxxxxxxxxxx>
  • To: oracle-l@xxxxxxxxxxxxx
  • Date: Wed, 10 Mar 2004 10:21:45 -0500

On 03/10/2004 09:46:39 AM, Pete Finnigan wrote:

> You are right for those ideas that involve finding passwords through
> various means could be social engineering But what i was really thinking
> of was running various commands as a non DBA user and changing the SYS
> password and then having access as SYS - those methods are not social
> engineering but hacking. I am trying to be vague as its not a good idea
> to show people in a public forum how to hack.

Well, some of those people could show you some decent tricks. Let's say that 
there
are versions of oracle in which the table behind DBA_DB_LINKS stores 
unencrypted ASCII....
Oh, well. You ar right, it's not nice.
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts: