Re: Who are ADAMS, BLAKE, CLARK, JONES Oracle users?

Hi Zoran,

Sorry note sure what these users are for BUT...

Some time ago i created a list of all of the default users and passwords that i could find in Oracle installations and listed the username, password and stored hash. I generated a simple SQL script to check for those users in a database. I did this to assist DBA's in checking their databases to make sure they had changed all the defaults to help prevent security issues. The list is at http://www.pentest-limited.com/defaultuser. htm and i have created a mailing list for those who would like to be made aware if the script gets updated.

Now to the point, i notice that you have two users listed that i don't have DES6I and SATURN. I would really appreciate it if you could let me have the passwords from the install scripts so i can update my list and script.

If anyone else knows of any usernames/passwords i dont have on my list then i would appreciate being made aware of them.

regards,
Pete Finnigan
www.pentest-limited.com

In article <P9pZ7.18807$A67.3875230_at_news20.bellglobal.com>, Zoran Marjanski <zoranm_at_sympatico.ca> writes
>This may seem like a silly question but my curiosity has gotten the best of
>me.
>
>In 8i there are a bunch of extra Oracle Users created during installation. I
>know about SCOTT, the sample schema, but who are the rest and what are
>they're passwords? Are they just other sample SCOTT's, but they don't have
>any database objects with them.
>
>What about the rest of them? Are these documented somewhere?
>
>ADAMS ?
>AURORA$JIS$UTILITY$ Java?
>AURORA$ORB$UNAUTHENTICATED Java?
>BLAKE ?
>CLARK ?
>CTXSYS ?
>DBSNMP Used for SNMP?
>DES6I Used by Designer 6i
>JONES ?
>MDSYS ?
>MTSSYS ?
>ORDPLUGINS ?
>ORDSYS ?
>OSE$HTTP$ADMIN Something to do with administration via http?
>OUTLN ?
>SATURN Used by OEM
>SCOTT I know about this one
>SYS I know about this one
>SYSTEM I know about this one
>
>Thanks, Zoran.
>
>

-- 
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager at admin_at_pentest-limited.com
--
Pete Finnigan
IT Security Consultant
PenTest Limited

Office  01565 830 990
Fax     01565 830 889
Mobile  07974 087 885

pete.finnigan_at_pentest-limited.com

www.pentest-limited.com