Oracle 10g R2 and, probably, all previous versions

2006-07-28 Thread Russell Lowenthal
Interesting comment. So if I understand what you are saying I should be able to create a user: SQL create user nottoosmart identified by d0ntkn0wmuch; User created. SQL grant create session to nottoosmart; Grant succeeded. SQL connect nottoosmart/d0ntkn0wmuch Connected. SQL alter session set

Oracle 10g R2 and, probably, all previous versions

2006-07-27 Thread putosoft softputo
I can't believe it. Oracle releases new patches and they have not been solved one of the main problems: A user with only the SELECT privilege can do WHATEVER (S)HE WANTS WITH THE ENTIRE DATABASE I'm not sure if is time to full disclosure it but, anyway, I will full disclosure one inocent