[dbsec] prevent remote user enumeration?

  • From: Richard Miles <richard.k.miles@xxxxxxxxxxxxxx>
  • To: dbsec@xxxxxxxxxxxxx
  • Date: Wed, 7 Apr 2010 09:54:07 -0500

Hi there!

Recently we discovered some of our students enumerating existent accounts in
our Oracle database, further search pointed to ora-userenum.exe and it
really works against our oracle 110 and 11g release.

There is a way to prevent oracle users enumeration? How?

Thank you

Other related posts:

  1. Home
  2. dbsec
  3. Archive
  4. 04-2010