RE: Reverse engineer passwords

From: William Beilstein <BeilstWH_at_obg.com>
Date: Fri, 14 Jul 2000 15:14:55 -0400
Message-Id: <10558.112112@fatcity.com>

Get the encrypted password by typing

SELECT PASSWORD FROM DBA_USERS WHERE USERNAME =3D 'MYUSER'; It will display the password as something like this;

PASSWORD

F83A16803G10C05A

You would then replace the password by using ALTER USER MYUSER IDENTIFIED BY NEW_PASSWORD; Run your applications.

If you need to reset the password issue the following command

ALTER USER MYUSER IDENTIFIED BY VALUES 'F83A16803G10C05A'; Which will reset the user to the original password.

>>> Linda Hagedorn <Linda_at_pets.com> 07/14/00 01:31PM >>> That's a good idea! Thanks!

-----Original Message-----
Sent: Friday, July 14, 2000 4:05 AM
To: Multiple recipients of list ORACLE-L

Hi,=20

You can store the encrypted password in a table, change your password as = you
like, test your application, if it fails then you know where to look = because
probably the password will be somewhere in the application or you can put the encrypted pasword back in de original table.

good luck=20

Vicnent Ruger=20
(Oracle DBA)=20

-----Oorspronkelijk bericht-----=20
Van: root_at_fatcity.com [ mailto:root_at_fatcity.com <mailto:root_at_fatcity.com> ]Namens Eric Lansu=20
Verzonden: vrijdag 14 juli 2000 12:15=20 Aan: Multiple recipients of list ORACLE-L=20 Onderwerp: Re: Reverse engineer passwords=20

I hope it's not possible to do this reverse engeneering for it would mean = a=20
serious security-problem.=20

Eric Lansu=20

Original Message -----=20 To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>=20 Sent: Thursday, 13 July 2000 22:17=20

> Some passwords are lost, others are in clear text, others are operational=
=20
> (somewhere in production), but not known due to turnover. Rather =
than=20
> possibly break running systems by changing passwords, we (dba staff) =
would

> like to reverse engineer the passwords in dba_users.=20
>=20
> Has anyone done this, and if so, will you send the key to me? =
Referrals=20
to=20
> documentation are appreciated.=20

>=20

> Thank you.=20

>=20

> Linda Hagedorn=20

>=20

> --=20
> Author: Linda Hagedorn=20
> INET: Linda_at_pets.com=20

>=20


> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051=20

> San Diego, California        -- Public Internet access / Mailing =

Lists=20


> --------------------------------------------------------------------=20

> To REMOVE yourself from this mailing list, send an E-Mail message=20
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in=20
> the message BODY, include a line containing: UNSUB ORACLE-L=20
> (or the name of mailing list you want to be removed from). You may=20
> also send the HELP command for other information (like subscribing).=20

--=20
Author: Eric Lansu=20
INET: eric.lansu_at_quicknet.nl=20

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051=20
San Diego, California        -- Public Internet access / Mailing Lists=20
--------------------------------------------------------------------=20

To REMOVE yourself from this mailing list, send an E-Mail message=20 to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in=20 the message BODY, include a line containing: UNSUB ORACLE-L=20 (or the name of mailing list you want to be removed from). You may=20 also send the HELP command for other information (like subscribing).=20

--=20
Author: Linda Hagedorn
INET: Linda_at_pets.com=20

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L Received on Fri Jul 14 2000 - 14:14:55 CDT