Re: Oracle 11i login encryption?

From: DR <dr_at_invalid.address>
Date: Wed, 22 Feb 2006 18:38:57 +0100
Message-ID: <43fca1b0$0$15791$14726298@news.sunsite.dk>

<eryansmith_at_gmail.com> ha scritto nel messaggio news:1140623082.880162.102540_at_f14g2000cwb.googlegroups.com...
> Can you see the username and password in clear text?

Yes!

POST /OA_HTML/fndvald.jsp HTTP/1.1

Accept: */*

Referer:
http://somehost.domain/OA_HTML/AppsLocalLogin.jsp?langCode=US&username=<username>

Accept-Language: en-us,it;q=0.5

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50215; .NET CLR 2.0.50727) Host: somehost.domain

Content-Length: 67

Connection: Keep-Alive

Cache-Control: no-cache

Cookie:

................................................................................

username=<clear_username_here>&password=<clear_pass_here>&langCode=US&requestUrl=APPSHOMEPAGEHTTP/1.1 302 Found

Regards,
Dimitre Received on Wed Feb 22 2006 - 11:38:57 CST