Search Oracle Blogs

List of Blogs maintained by Paweł Barut.

Saturday, December 30, 2006

Security: getting DBA rights quite easy

I've stepped today at ORASEC blog by Paul Wright. I've found this issue a big problem. Anybody that is using Oracle client on windows can quite easy get DBA rights by editing client9.dll file. I've to check if this is still problem with latest Oracle release.

Cheers, Paweł

1 comment:

Paweł Barut said...

I cannot reproduce this bug on Oracle and When I run sql*plus it gives 'ORA-00604: error occurred at recursive SQL level 1
ORA-01031: insufficient privileges' and does not log on.
So these versions seems to be safe.


Copyright © Paweł Barut
Printing from DOS to USB Printer