Call: +44 (0)7759 277220 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Home » Archives » January 2007 » Great paper on Oracle Applications 11i password weaknesses and decryption

[Previous entry: "Teaching an Old Dog New Tricks"] [Next entry: "Oracle have announced a CPU pre-release feature"]

Great paper on Oracle Applications 11i password weaknesses and decryption

January 10th, 2007 by Pete

I have been aware of how the 11i password algorithm works for a few years but it has never been talked about much in papers and websites until recently. Steve Kost and a few others posted about this a few weeks ago. Steve has today released a very nice paper titled "Oracle Applications 11i password decryption". This paper is to Steve's usual excellent standards and well worth reading.

  • PFCLScan

    Simply connect PFCLScan to your Oracle database and it will automatically discover the security issues that could make your Oracle database vulnerable to attack and to the potential loss of your data.

  • PFCL Obfuscate PFCLObfuscate

    PFCLObfuscate is the only tool available that can automatically add license controls to your PL/SQL code. PFCLObfuscate protects your Intellectual Property invested in your PL/SQL database code.

  • PFCL Training PFCLTraining

    PFCLTraining is a set of expert training classes for you, aimed at teaching how to audit your own Oracle database, design audit trails, secure code in PL/SQL and secure and lock down your Oracle database.

  • PFCL Services PFCLServices

    Choose PFCLServices to add Ltd to your team for your Oracle Security needs. We are experts in performing detailed security audits, data security design work and policy creation