Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Oracle 9i DB Security Hole

Oracle 9i DB Security Hole

From: m. fowler <mfowler_at_dot.co.pima.az.us>
Date: 17 Apr 2002 09:37:18 -0700
Message-ID: <e9c5a67.0204170837.5ade900@posting.google.com> 





I think the 'bug' can be summarized thus:  any user has read/write
access to the data dictionary and any other user data.  This can be
rephrased like this: there is no security within the 9.0.1 database. 
The implications of this would seem to be rather profound.
Received on Wed Apr 17 2002 - 11:37:18 CDT












Original text of this message













  HOME |
  ASK QUESTION |
  ADD INFO |
  SEARCH |
  E-MAIL US