Re: Oracle Banner

From: Pete Finnigan <oracle_list_at_peterfinnigan.demon.co.uk>
Date: Tue, 29 Jul 2003 00:24:26 -0800
Message-ID: <F001.005C78E1.20030729002426@fatcity.com>

Hi Chris,

Nice idea!,

Out of interest I was looking for a way to hide or alter the listener banner info when i was writing the Oracle security step-by-step book for SANS but i didn't consider how to alter the banner info for the server as well.

I wanted to find a way to hide banner info to stop those people who map networks looking for recognisable apps so that they can exploit them. The best way forward we could come up with at the time was to set the password as suggested in Howard Smiths paper.

Oracle do allow configurable banner info for IFS and I was told by someone in Oracle that they were working towards allowing a configurable banner for the listener sometime in the future.

I will add your idea for the server to my list though, thanks.

kind regards

Pete
--

Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Pete Finnigan
  INET: oracle_list_at_peterfinnigan.demon.co.uk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Tue Jul 29 2003 - 03:24:26 CDT