Re: Create a new user

Hi!

The original question was that what could be done if a hacker came across a SQLPlus logged in as DBA, and what could be done "....such that [it] can be exploitet much later." The immediate risks are fairly obvious. Im interpreting the question as:How can someone create a security breach that can be misused later(months/years) for benefit? e.g someone can query sensitive data, "adjust" invoices or similar, in the application.
I business hacker may not benefit much from drop'ping tables in a application, because it will soon be discovered, and the breach secured (as easy as you describe).

Frank Received on Fri Mar 16 2001 - 13:53:39 CST