Oracle sid_enum

[Alfonso Caponi <alfonso.caponi () gmail com>]

Hi list,

I noticed setting a tns-listener password in Oracle 8.1.7* ("SECURITY=ON"),
the SIDs are anyway enumerable (via "Command=status"). I tested using
/auxiliary/scanner/oracle/sid_enum module.

According to you, is firewall filtering the only possible solution?
As for "Oracle8 tns security" I did not find information on google. For
Oracle 9 is different.

Thanks in advance,
Al

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework