I suppose I should have included that I tested this on 8.1.7.4.0 on HP/UX
and 8.0.5.0.1 on OpenVMS, and the same passwords hash to the same values in
each.  I wonder if it's different for other versions.  7?  9?  10???  :)

Rich


Rich Jesse                           System/Database Administrator
[EMAIL PROTECTED]              Quad/Tech International, Sussex, WI USA

> -----Original Message-----
> From: Jesse, Rich 
> Sent: Tuesday, December 17, 2002 3:31 PM
> To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED]
> Subject: RE: password
> 
> 
> Well, that's the default password.  Is the *hash* the same, though?
> 
> Someone had mentioned that they thought it was DB-dependant.  
> That can't be, since I can copy a DB, change the name, and 
> fire it up without changing the password.
> 
> Rich
> 
> 
> Rich Jesse                           System/Database Administrator
> [EMAIL PROTECTED]              Quad/Tech International, 
> Sussex, WI USA
> 
> 
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, December 17, 2002 3:01 PM
> > To: [EMAIL PROTECTED]
> > Cc: Jesse, Rich
> > Subject: RE: password
> > 
> > 
> > > Does "CHANGE_ON_INSTALL" have the same hash value for every
> > > version and every instance?
> > 
> > Yes, it does.
> > 
> > Check:  http://www.pentest-limited.com/default-user.htm
> > 
> > This is a pentest list of default Oracle passwords.
> > 
> > I've used this to create a perl script that checks for 
> > default passwords.
> > 
> > It doesn't matter which version of Oracle.
> > 
> > Jared
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jesse, Rich
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to