OPS$ & security

From: <mr_daemon_at_my-dejanews.com>
Date: Thu, 13 May 1999 23:39:48 GMT
Message-ID: <7hfns4$3c7$1@nnrp1.deja.com>

Hi,

Clearly, external authentication ( OPS$ accounts ) are a security hole if remote logins are allowed
( that is, if REMOTE_OS_AUTHENT=TRUE )

Any one know of exploits where REMOTE_OS_AUTHENT=FALSE ?
( other than the obvious, of someone walking away from
a terminal leaving it logged in to the server as the authorized user. )

we're a Sparc/Solaris 2.6, Oracle 8.0.5 environment.

--== Sent via Deja.com http://www.deja.com/ ==-- ---Share what you know. Learn what you don't.--- Received on Thu May 13 1999 - 18:39:48 CDT