Message from discussion
Security jaw dropper
Received: by 10.68.227.230 with SMTP id sd6mr10307477pbc.8.1335563891401;
Fri, 27 Apr 2012 14:58:11 -0700 (PDT)
Path: r9ni105863pbh.0!nntp.google.com!news2.google.com!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
From: onedbguru <onedbg...@yahoo.com>
Newsgroups: comp.databases.oracle.server
Subject: Re: Security jaw dropper
Date: Fri, 27 Apr 2012 14:56:07 -0700 (PDT)
Organization: http://groups.google.com
Lines: 19
Message-ID: <16213720.11.1335563767123.JavaMail.geo-discussion-forums@vbkv21>
References: <bd71cd2d-6621-45cd-b236-f6efe9ff6afe@r9g2000yqd.googlegroups.com>
NNTP-Posting-Host: 71.179.224.9
Mime-Version: 1.0
X-Trace: posting.google.com 1335563891 18894 127.0.0.1 (27 Apr 2012 21:58:11 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Fri, 27 Apr 2012 21:58:11 +0000 (UTC)
In-Reply-To: <bd71cd2d-6621-45cd-b236-f6efe9ff6afe@r9g2000yqd.googlegroups.com>
Complaints-To: groups-abuse@google.com
Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=71.179.224.9; posting-account=RH60QQkAAADzKhzlh9Wlkn9a3iP-8DFN
User-Agent: G2/1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
On Thursday, April 26, 2012 5:53:47 PM UTC-4, joel garry wrote:
> http://seclists.org/fulldisclosure/2012/Apr/343
>=20
> jg
> --
> @home.com is bogus.
> http://en.wikipedia.org/wiki/D.O.A._%281950_film%29
Try copying an init.ora file for a RAC system to a new system and start up =
the instance (restore control files and just mount the database for databas=
e restore). Wait a bit - and then try to connect to the original database =
service name (example: sqlplus user/password@original:1521/ORCL. Database =
is ORCL with instances ORCL{n}. You will eventually start getting ORA-01033=
errors - database is starting up or shutting down. It will drive you mad=
until you realize that (and search MOS) the new database has registered wi=
th the original listener and it is the only one the SCAN tries to send the =
new connections. Can we say DoS!!! Luckily, the "original" in this case wa=
s a TEST cluster!