Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Reverse engineer passwords

Re: Reverse engineer passwords

From: Anjan Thakuria <anjan.thakuria_at_sabre.com>
Date: Fri, 14 Jul 2000 14:39:56 -0500
Message-Id: <10558.112106@fatcity.com>


This is a multi-part message in MIME format.

--------------35C6C7084FB858F2DD3F284C
Content-Type: text/plain; charset=gb2312
Content-Transfer-Encoding: 7bit

My .02. Once I ran into this . And ran into a dead end as far as regenerating the passwords.

However if the encrypted password is available one can use the statement,

alter user <username> identified by values 'encrypted value' ;

Hope this helps or maybe it is redundant.

Anjan

Linda Hagedorn wrote:

> Hi Vincent,
>
> I have the encrypted password, and I want to reverse engineer it to the
> Ebcdic. Do you have the math or routine?
>
> Thanks,
>
> Linda
>
> -----Original Message-----
> Sent: Friday, July 14, 2000 5:45 AM
> To: Multiple recipients of list ORACLE-L
>
> hi,
>
> look into dba_users, there y'll find the encrypted password.
>
>
> Vincent
>
>
> -----Oorspronkelijk bericht-----
> Van: root_at_fatcity.com [mailto:root_at_fatcity.com]Namens Siva_Chintalapati
> Verzonden: vrijdag 14 juli 2000 14:09
> Aan: Multiple recipients of list ORACLE-L
> Onderwerp: RE: Reverse engineer passwords
>
> Where does this passwords store.What is that file.Will it be in encrypted
> form??
> Siva
>
> ----------
> Reply To: ORACLE-L_at_fatcity.com
> Sent: Friday, July 14, 2000 4:35 PM
> To: Multiple recipients of list ORACLE-L
>
> Hi,
>
> You can store the encrypted password in a table, change your
> password as you like, test your application, if it fails then you know where
> to look because probably the password will be somewhere in the application
> or you can put the encrypted pasword back in de original table.
>
> good luck
>
> Vicnent Ruger
> (Oracle DBA)
>
> -----Oorspronkelijk bericht-----
> Van: root_at_fatcity.com [ mailto:root_at_fatcity.com <mailto:root_at_fatcity.com>
> ]Namens Eric Lansu
> Verzonden: vrijdag 14 juli 2000 12:15
> Aan: Multiple recipients of list ORACLE-L
> Onderwerp: Re: Reverse engineer passwords
>
> I hope it's not possible to do this reverse engeneering for it would
> mean a
> serious security-problem.
>
> Eric Lansu
>
> ----- Original Message -----
> To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
> Sent: Thursday, 13 July 2000 22:17
>
> > Some passwords are lost, others are in clear text, others are
> operational
> > (somewhere in production), but not known due to turnover. Rather than
> > possibly break running systems by changing passwords, we (dba staff) would
>
> > like to reverse engineer the passwords in dba_users.
> >
> > Has anyone done this, and if so, will you send the key to me? Referrals
> to
> > documentation are appreciated.
> >
> > Thank you.
> >
> > Linda Hagedorn
> >
> > --
> > Author: Linda Hagedorn
> > INET: Linda_at_pets.com
> >
> > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> > San Diego, California -- Public Internet access / Mailing Lists
> > --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
>
> --
> Author: Eric Lansu
> INET: eric.lansu_at_quicknet.nl
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
> --
> Author: Linda Hagedorn
> INET: Linda_at_pets.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

--------------35C6C7084FB858F2DD3F284C
Content-Type: text/x-vcard; charset=gb2312;  name="anjan.thakuria.vcf"

Content-Transfer-Encoding: 7bit
Content-Description: Card for Anjan Thakuria
Content-Disposition: attachment;

 filename="anjan.thakuria.vcf"

begin:vcard
n:Thakuria;Anjan
tel;fax:817-931-6307
tel;work:817-963-3291
x-mozilla-html:TRUE
org:Sabre Inc.;DEAS Received on Fri Jul 14 2000 - 14:39:56 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US