In article <B5C5F99D765BB744B54FFDF35F60262109F879C0@irvmbxw02>, Jacques Kilchoer <Jacques.Kilchoer@xxxxxxxxx> writes >I hope you don't mean that you leave the SYS and SYSTEM passwords to the >defaults used at database creation time.=20 Hi, The OP should not leave any default users passwords set to their default values. Damage or escalation of privileges is possible from many if not all of the default accounts. Don't just assume that because the database is behind a firewall that its safe to leave it insecure. kind regards Pete -- Pete Finnigan email:pete@xxxxxxxxxxxxxxxx Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details. ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put 'unsubscribe' in the subject line. -- Archives are at //www.freelists.org/archives/oracle-l/ FAQ is at //www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------