Re: Listener Security

Jay,

I had a meeting with the security expert on this issue before. According to him (and him only.. as I myself is no security expert person!!), the data that got transferred using the NET8/SQLNET is not encrypted at all. The only encrypted part that are being pass from the data server to the client is the username and the password. That is why if you really need to encrypted the data also. You will need to have the Advanced Network Security Option (this name had been changed from version to version release.. and I am not keeping up with the name also.)

Hope this tiny information can help you.

Winnie

"Miller, Jay" <JayMiller_at_TDWaterhouse.com> on 05/01/2000 08:16:43 AM

Please respond to ORACLE-L_at_fatcity.com

To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc: (bcc: Winnie Liu/HQ/ISC)

Subject: Listener Security

My boss' boss called me in the other day and asked me what damage an intruder could do if he or she gained control of the listener process through Net8.
I have no idea (or even whether such a thing is possible), but I ordered Marlene Theriault's Security book, have started wading through the Oracle Security docs, and am posting the question here :).

Any ideas?

--
Author: Miller, Jay
  INET: JayMiller_at_TDWaterhouse.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).