Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: putting an alias in my tnsnames for a change to report server

Re: putting an alias in my tnsnames for a change to report server

From: damorgan <damorgan_at_exesolutions.com>
Date: Fri, 12 Jul 2002 19:52:51 GMT
Message-ID: <3D2F33A5.A5996DB1@exesolutions.com>


Sean M wrote:

> So, what's worse - the guy who posts sensitive military computer
> information to an internet newsgroup, or the guy that takes that post as
> an invitation to hack said computer? The former was a really bad idea;
> the latter may be criminal.
>
> [Just because someone leave his car door unlocked doesn't mean it's OK
> to hop in and change the station on his radio.]
>
> Regards,
> Sean
>
> Martin Haltmayer wrote:
> >
> > Oh boy, don't be too sure!
> >
> > The tnsnames.ora used for this has the following entry, all deducted from your
> > post:
> >
> > mil.world =
> > (description =
> > (address = (protocol = tcp) (host = 144.101.14.115 ) (port = 1521))
> > (connect_data = ( SERVICE_NAME = apandev.mtmc.army.mil ))
> > )
> >
> > G:\Daten\Martin\tests>sqlplus dbsnmp/dbsnmp_at_mil.world
> >
> > SQL*Plus: Release 8.1.7.0.0 - Production on Thu Jul 11 16:03:14 2002
> >
> > (c) Copyright 2000 Oracle Corporation. All rights reserved.
> >
> > Connected to:
> > Oracle8i Enterprise Edition Release 8.1.7.2.1 - Production
> > JServer Release 8.1.7.2.1 - Production
> >
> > SQL> set feedback on
> > SQL> set linesize 110
> > SQL> set pagesize 60
> > SQL> set timing on
> > SQL> set trimspool on
> > SQL> define _editor = lemmy.exe
> > SQL> set echo on
> > SQL> set feedback on
> > SQL> set linesize 1000
> > SQL> set pagesize 0
> > SQL> set timing on
> > SQL> set verify on
> > SQL> -- whenever sqlerror exit failure rollback
> > SQL> whenever sqlerror continue
> > SQL> select * from v$session;
> > 06D0D934 1 1 0 06CECB78
> > 0 0 2147483644
> > ACTIVE DEDICATE
> > D 0 SYS SYSTEM
> > 367 HQ73 HQ73
> > ORACLE.EXE BACKGROUND
> > 00 0 00 0
> >
> > 0 0
> > 0 -1 0 0 0
> > 11-JUL-02 28479 NO NONE NONE NO
> > DISABLED ENABLED ENABLED
> > 06D0E1A0 2 1 0 06CECEA0
> > 0 0 2147483644
> > ACTIVE DEDICATE
> > D 0 SYS SYSTEM
> > 394 HQ73 HQ73
> > ORACLE.EXE BACKGROUND
> > 00 0 00 0
> >
> > 0 0
> > 0 -1 0 0 0
> > 11-JUL-02 28482 NO NONE NONE NO
> > DISABLED ENABLED ENABLED
> > 06D0EA0C 3 1 0 06CED1C8
> > 0 0 2147483644
> > ACTIVE DEDICATE
> > D 0 SYS SYSTEM
> > 383 HQ73 HQ73
> > ORACLE.EXE BACKGROUND
> > 00 0 00 0
> >
> > 0 0
> > 0 -1 0 0 0
> > 11-JUL-02 28482 NO NONE NONE NO
> > DISABLED ENABLED ENABLED
> > 06D0F278 4 1 0 06CED4F0
> > 0 0 2147483644
> > ACTIVE DEDICATE
> > D 0 SYS SYSTEM
> > 347 HQ73 HQ73
> > ORACLE.EXE BACKGROUND
> > 00 0 00 0
> >
> > 0 0
> > 0 -1 0 0 0
> > 11-JUL-02 28482 NO NONE NONE NO
> > DISABLED ENABLED ENABLED
> > 06D0FAE4 5 1 0 06CED818
> > 0 0 2147483644
> > ACTIVE DEDICATE
> > D 0 SYS SYSTEM
> > 124 HQ73 HQ73
> > ORACLE.EXE BACKGROUND
> > 06833F20 1714733582 06833F20 1714733582
> >
> > 0 0
> > 0 -1 0 0 0
> > 11-JUL-02 28482 NO NONE NONE NO
> > DISABLED ENABLED ENABLED
> > 06D10350 6 1 0 06CEDB40
> > 0 0 2147483644
> > ACTIVE DEDICATE
> > D 0 SYS SYSTEM
> > 361 HQ73 HQ73
> > ORACLE.EXE BACKGROUND
> > 06837CD0 3625995331 06837CD0 3625995331
> >
> > 0 0
> > 0 -1 0 0 0
> > 11-JUL-02 28482 NO NONE NONE NO
> > DISABLED ENABLED ENABLED
> > 06D10BBC 7 3 5788 06CEDE68 110
> > DBSNMP 0 2147483644 INACTIVE
> > DEDICATE
> > D 110 DBSNMP NT AUTHORITY\SYSTEM
> > 103:250 SPAN\HQ73 HQ73
> > dbsnmp.exe USER
> > 068437D4 2501101467 068437D4 2501101467
> >
> > 0 0
> > 1 -1 0 0 0
> > 11-JUL-02 28463 NO NONE NONE NO DEFAULT_CONSUMER_GROUP
> > DISABLED ENABLED ENABLED
> > 06D11428 8 133 5790 06CEE190 110
> > DBSNMP 3 2147483644 ACTIVE
> > DEDICATE
> > D 110 DBSNMP martin
> > 1204:688 WORKGROUP\SCHLEPPTOP SC
> > HLEPPTOP
> > sqlplus.exe USER
> > 067AB990 3983320901 067AB990 3983320901 SQL*
> > Plus
> > 3669949024 4029777240
> > 3 -1 0
> > 0 0 11-JUL-02 0 NO NONE NONE NO
> > DEFAULT_C
> > ONSUMER_GROUP DISABLED ENABLED ENABLED
> >
> > 8 rows selected.
> >
> > Elapsed: 00:00:04.86
> > SQL>
> > SQL> alter user dbsnmp identified by blafasel;
> >
> > User altered.
> >
> > Elapsed: 00:00:01.92
> >
> > Just try the new password!
> >
> > Regards,
> >
> > Martin
> >
> > Ryan Gaffuri wrote:
> > >
> > > spamdump_at_nospam.noway.nohow (Ed Stevens) wrote in message news:<3d22f243.176415341_at_ausnews.austin.ibm.com>...
> > > > On 2 Jul 2002 10:49:30 -0700, rgaffuri_at_cox.net (Ryan Gaffuri) wrote:
> > > >
> > > > >I tried to add an alias to my tnsnames on both my oracle server and my
> > > > >developer server. This is what I added. Its not working.....
> > > > >
> > > > >Per note: 139546.1 at the end under known issues. It says to add an
> > > > >alias to my tnsnames to get around the issue with reports servers have
> > > > >numbers, etc... in its name.
> > > > >
> > > > >Here is the part of the tnsnames.ora file that has the instance that
> > > > >Im interested and what I added:
> > > > >
> > > > >APANDEV.MTMC.ARMY.MIL =
> > > > > (DESCRIPTION =
> > > > > (ADDRESS_LIST =
> > > > > (ADDRESS = (PROTOCOL = TCP)(HOST = 144.101.14.115)(PORT = 1521))
> > > > > )
> > > > > (CONNECT_DATA =
> > > > > (SERVICE_NAME = apandev.mtmc.army.mil)
> > > > > )
> > > > > )
> > > > >
> > > > >myserver Rep60_HQ73-dev6i=(ADDRESS=(PROTOCOL=tcp)(HOST=HQ73-dev6i)(PORT
> > > > >1521)
> > > > >
> > > > >
> > > > >There are 4-5 others instances listed in this tnsnames.. the
> > > > >
> > > > >Rep60_HQ73-dev6i comes directly out of my registry. What did I do
> > > > >wrong? It does not recognize this when I try to run the report with
> > > > >run_report_object?
> > > >
> > > > The technical answer to your question has been answered. However, I would like
> > > > to express some concern that you have exposed the IP address and other connect
> > > > information of a military database. A good hacker (which I'm not) now knows the
> > > > IP address, server DNS name, and listening port of a database server owned by
> > > > the U.S. Army. Makes the hair stand up on the back of my neck.
> > >
> > > try the IP address it wont work. Thanks for your concern.

If the act of hacking was such that it costs Ryan Gaffuri a few nights sleep I'd say "go for it". I am quite offended by several things. First that he posted the information at all potentially compromising the security of my family, friends, and country. And second that he apparently tried to cover up what he did with a transparent story about having changed an IP address.

Because even if he had changed the IP address in his posting it was still a gross breach of protocol and I sincerely hope someone monitoring this group from the FBI, NSA, or another .mil domain takes this seriously and arranges for him to have an opportunity to consider his act ... in the brig..

Daniel Morgan Received on Fri Jul 12 2002 - 14:52:51 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US