Re: Hacking An Oracle Session : Is It Possible?

From: Sean Chang <sean_at_cnfei.com>
Date: Fri, 14 May 2004 12:00:34 -0400
Message-ID: <40a4ed6d_3@corp.newsgroups.com>

Don't know what you mean by hacking.
I can use tcpflow to catch and re-assemble all data from a SQL*PLUS session, as long as it goes through network (tcp), in plain text.

The situation is different if you use SQL+ on ssh shell, all texts are encrypted.

"Aakash" <daakash_at_yahoo.com> wrote in message news:83fd0b82.0405140641.6bbacd4e_at_posting.google.com...
> hello everyone,
>
> after a client machine,say SQL*Plus, establishes a session with the
> oracle database , is it possible to intrude into the established
> session? i.e is it possible to get into the session layer of the
> oracle session? is oracle vulnerable to such an hacking?

-----= Posted via Newsfeeds.Com, Uncensored Usenet News =----- http://www.newsfeeds.com - The #1 Newsgroup Service in the World! -----== Over 100,000 Newsgroups - 19 Different Servers! =----- Received on Fri May 14 2004 - 11:00:34 CDT