Re: Security-check

From: James Dickson <James.Dickson_at_mail.esrin.esa.it>
Date: Thu, 11 Feb 1999 10:03:06 +0100
Message-ID: <36C29CCA.470E@mail.esrin.esa.it>

Nigol Martin wrote:
>
> Hi,
>
> I have to check an Oracle-System for security. Does anyone know a checklist
> or something to get an idea what to check ?
>
> Thanks,
>
> Nigol Martin

Try logging in as SYS or SYSTEM with obvious passwords like 'pass', 'change_on_install', 'manager' &c and try to log in as known users with password the same as username. Check to see if passwords to key accounts are hard-coded into world readable scripts. Check if auditing is turned on.

James
--
james_at_valhall.esrin.esa.it.NOSPAM Received on Thu Feb 11 1999 - 03:03:06 CST