Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
Cookie Policy:We only use essential cookies on small sections of this website. For details see here.

Welcome, Guest. Please Login.
Nov 23rd, 2017, 7:05am
News: Welcome to Pete Finnigan's Oracle security forum
Home | Help | Search | Members | Login
   Pete Finnigan's Oracle Security Forum
   Database Security
   Database Security
(Moderator: Pete Finnigan)
   DBF FILE READERS
« Previous topic | Next topic »
Pages: 1  Reply | Notify of replies | Send Topic | Print
   Author  Topic: DBF FILE READERS  (Read 4343 times)
mfreeze
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile |

Posts: 2
DBF FILE READERS
« on: Jun 8th, 2007, 6:15pm »
Quote | Modify

Hello All:
I am somewhat new to Oracle and still learning. We have encountered an issue where during zipping and encrypting of our coldbackup files a few such as the undo01.dbf file was encrypted but the original remained un-encrypted and moved to tape. My question is simple, if a tape was ever lost is it possible for someone to view individual dbf files without having to restore through Oracle by using some sort of dbf viewer that will let them read any data in a text format.
IP Logged
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: DBF FILE READERS
« Reply #1 on: Jun 8th, 2007, 8:43pm »
Quote | Modify

Hi,
 
Yes its possible. there are a number of individual people who have written block reading software. There are also a numbre of companies doing the same. Oracle has a tool called DUL that does the same. There are also tools intrnal to Oracle that can read blocks without the database being up. There is the BBED tool shipped with Oracle databases that does the same and finally there is Unix strings command.
 
Dont let you datafiles out of your site, even without a database the data can be read
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
mfreeze
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile |

Posts: 2
Re: DBF FILE READERS
« Reply #2 on: Jun 11th, 2007, 2:49pm »
Quote | Modify

Thanks Pete. I came across MyDul and Dude which are examples of such programs.
IP Logged
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: DBF FILE READERS
« Reply #3 on: Jun 11th, 2007, 5:01pm »
Quote | Modify

I would also watch this space as David L has started an open source project to create tools to perform forensic analysis of an Oracle database. he is also writing a book on the same subject. I would fully expect this toolkit to include tools capable of reading data directly from blocks.
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Pages: 1  Reply | Notify of replies | Send Topic | Print

« Previous topic | Next topic »

Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board