HP’s Oracle Blog

Notes of a Junior on the Path to Oracle Mastery


Notes of a Junior on the Path to Oracle Mastery
On this blog I am writing about thoughts, solutions, failures and pitfalls on the path to Oracle Mastery. It’s still a long way to go. On this blog, the main focus is learning Oracle.

perfstat/perfstat, OScanner reveals them all

Published by HP Fuchs | Filed under Oracle Database, Security, Tools

Unfortunately, creating database accounts like “create user test identified by test” is common practice. Leaving default accounts with default passwords open is as common too. OScanner reveals those weak points mercilessly.

Oracle Scanner 1.0.6 by patrik@cqure.net
————————————————–
[-] Checking host 120.23.45.104
[-] Checking sid (t432) for common passwords
[x] Got IO Exception
[-] Checking sid (t433) for common [...]

March 18th, 2008. 1 Comment »

Hardening Oracle Servers

Published by HP Fuchs | Filed under Security

On Tonguç Yilmaz Oracle Blog I clicked on a link to “Project Lockdown - A phased approach to securing your database infrastructure” recently. This is an exceptional article about hardening Oracle servers, written by Arup Nanda and published on OTN.

March 14th, 2007. Comment now »