From: Clement Dupuis (cdupuis@cccure.org)
Date: Tue Aug 02 2005 - 21:49:37 EDT
Look at:
http://www.professionalsecuritytesters.org/modules.php?name=News&new_topic=4
7
There are a couple entries in there that can help you.
Look at hashattack and WinSID
-----Original Message-----
From: Joe T [mailto:recommendeddosage@gmail.com]
Sent: Tuesday, August 02, 2005 11:55 AM
To: Subject: Oracle Auditing
Good day,
I should preface this message by saying that I have little to no
experience with Oracle administration, and I'm looking to gain a bit
of information.
When performing some network scans, I notice that the Oracle database
rarely has a password set for the tnslsnr account. From the Nessus
scan results, I have learned that the database may be compromised
because of this null password. I've searched the web, and the majority
of the information I find talks about a DoS attack for Oracle 8.
My question becomes: Has anyone exploited this misconfiguration, and
if so - how? Is this an account that you can connect to without
expensive Oracle software?
Also, what other tools do you utilize to audit Oracle?
Thank you,
Joe
----------------------------------------------------------------------------
-- FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don't Learn the hacker's secrets that compromise wireless LANs. Secure your WLAN by understanding these threats, available hacking tools and proven countermeasures. Defend your WLAN against man-in-the-Middle attacks and session hijacking, denial-of-service, rogue access points, identity thefts and MAC spoofing. Request your complimentary white paper at: http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801 ---------------------------------------------------------------------------- --- --- avast! Antivirus: Inbound message clean. Virus Database (VPS): 0531-1, 08/02/2005 Tested on: 8/2/2005 9:22:51 PM avast! - copyright (c) 1988-2004 ALWIL Software. http://www.avast.com --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 0531-1, 08/02/2005 Tested on: 8/2/2005 9:49:47 PM avast! - copyright (c) 1988-2004 ALWIL Software. http://www.avast.com ------------------------------------------------------------------------------ FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don't Learn the hacker's secrets that compromise wireless LANs. Secure your WLAN by understanding these threats, available hacking tools and proven countermeasures. Defend your WLAN against man-in-the-Middle attacks and session hijacking, denial-of-service, rogue access points, identity thefts and MAC spoofing. Request your complimentary white paper at: http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801 -------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:40 EDT