[52306] in SAPr3-news
600 Oracle default usernames/passwords available
daemon@ATHENA.MIT.EDU (Pete Finnigan)
Wed Nov 17 13:14:14 2004
To: sapr3-news@mit.edu
Date: Wed, 17 Nov 2004 17:58:20 +0000
From: Pete Finnigan <plsql@petefinnigan.com>
Message-ID: <PnPDxrC8E5mBRx0E@peterfinnigan.demon.co.uk>
Hi Everyone,
I have just added a page to my site that lists 596 default Oracle users
and their passwords. The list is available as HTML, CSV, SQL insert
statements to load the data into a table, MS Excel spreadsheet and Open
Office spreadsheet. The list can be used to audit your database for
existing default accounts and to check that their passwords are not
still the defaults.
I have also updated the default password check script archive to include
the much bigger list of default users.
The Oracle default password lists can be found here:-
http://www.petefinnigan.com/default/default_password_list.htm
and the tool to check for default passwords can be found here:-
http://www.petefinnigan.com/default/default_password_checker.htm
kind regards
Pete
--
Pete Finnigan (email:pete@petefinnigan.com)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.
