DBAsupport.com Forums - Powered by vBulletin
Results 1 to 4 of 4

Thread: sys password bypass

  1. #1
    Join Date
    May 2003
    Location
    Pretoria, Rep of South Africa
    Posts
    191

    sys password bypass

    I found this by accident.

    I used the PWD.....ora file to connect to sys as sysdba. We all know this is possible.

    >conn sys/95AA47D6E59241CD@my_db as sydba
    >connected

    Then I used another database's "incrypted" sys password e.g 4DE42795E66117AB and connected again to the first database sys user?

    How the hell is this possible?
    Able was I ere I saw Elba

  2. #2
    Join Date
    Sep 2002
    Location
    England
    Posts
    7,334
    if you are in the dba group you will get in whatever you put as the password

  3. #3
    Join Date
    May 2003
    Location
    Pretoria, Rep of South Africa
    Posts
    191
    Thanks for your reply. Your answer gives me chilles about our security !!
    Able was I ere I saw Elba

  4. #4
    Join Date
    Nov 2000
    Location
    Pittsburgh, PA
    Posts
    4,166
    Try creating a user with no special prvileges, who isn't in the dba group. Then log in as that user and try to log into Oracle with the second encrypted password above.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Click Here to Expand Forum to Full Width