there's also the ALL POWERFUL
scott/tiger account to consider!
-----Original Message-----
Sent: Wednesday, July 18, 2001 11:07 AM
To: Multiple recipients of list ORACLE-L
Although there has been so much publicity of security "holes" in Oracle,
in
particular the listener, the one hole that really causes me concern is the
default passwords for sys and system and/or using the username as a
password.
Over the past 2 years I've been to a few sites, like 4, at a friends request
and/or on an interview where the manager said "show me" and each time I've
been
able to log onto the DB with any of the following:
sys/change_on_install
sys/sys
system/system
system/manager
Now come on, this was an old V6 thing that we were suppose to do, and we're
still not!!
Dick Goulet
____________________Reply Separator____________________
Author: Ray Stell <[EMAIL PROTECTED]>
Date: 7/18/2001 5:15 AM
On Wed, Jul 18, 2001 at 03:45:57AM -0800, Jon Walthour wrote:
> Listers:
>
> My client has asked me to look into this issue and determine if they
should
> be concerned about it or not. Since they don't have any db's directly
> accessible from the Internet and since their LAN is very secure anyway,
I'm
> inclined to not apply any patches based on the premise that if it isn't a
> necessary patch, don't apply it in fear of breaking something else. What
do
> you think?
> --
two words, disgruntled employee
===============================================================
Ray Stell [EMAIL PROTECTED] (540) 231-4109 KE4TJC 28^D
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Ray Stell
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Mohan, Ross
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
