Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
There are 44 visitors online    

Pete Finnigan's Oracle security weblog


Home » Archives » August 2005 » A second thread on c.d.o.s. about the Oracle password algorithm

[Previous entry: "Red Database Security has released more Oracle password algorithm information"] [Next entry: "Alex Kornbrust has released a Linux version of his Oracle password cracker"]

A second thread on c.d.o.s. about the Oracle password algorithm

August 23rd, 2005 by Pete

Post to del.icio.us   Post to Furl   Digg!

There is a second thread on the comp.databases.oracle.server newsgroup that has the same Oracle password transform (algorithm) posted to it by presumably the same guy as the other thread I pointed to last night, this time with a different (abusive) name. The post (I will not repeat the title) includes a second post by the OP that has some C code that looks like it is part of a password check program. The actual encryption routines are not included.

It seems that this guy has been busy as he has also posted the same text to the Unix Documentation Project as "How to crack an Oracle password info". I have done some quick searches and found that it looks like he has posted this same information 3 times on July 17, August 11 and August 19.

August 2005
SMTWTFS
 123456
78910111213
14151617181920
21222324252627
28293031   

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Weblog Home
Weblog Archives

Oracle Security Step-by-Step (Version 2.0)

Home
Oracle Security Tools page
Oracle security papers
Oracle Security alerts

Web Development
SQL Server Security

RSS 1.0 FEED
RSS 2.0 FEED
Atom 0.3 FEED
Powered by gm-rss 2.0.0




View Pete Finnigan's profile on LinkedIn

Pete Finnigan

Create Your Badge



Valid XHTML 1.0!