Password Listener

February 4th, 2007 | Categories: Boring | Tags:
Leave a comment | Trackback

才知道Oracle的Listener可以远程连接；有很多方法可以通过remote manage Listener来获得dba的权限。

在本地$TNS_ADMIN目录下编辑listener.ora文件，加上远程数据库的连接信息，包括IP和Port。

  1. host-cshell$> cat listener.ora
  2. binzhang =
  3.    (DESCRIPTION =
  4.      (ADDRESS =
  5.        (PROTOCOL = TCP)
  6.        (Host = <ip address here>)
  7.        (Port = 1521)
  8.      )
  9.    )

然后就可以使用set current_listener;status;services等获得Listener信息，并且可以设置logfile到可以读取或者修改的目录或文件。

  1. host-cshell$> lsnrctl
  2. LSNRCTL for Solaris: Version 8.1.6.2.0 - Production on 04-JUN-2007 00:40:18
  3. (c) Copyright 1998, 1999, Oracle Corporation.  All rights reserved.
  4. Welcome to LSNRCTL, type "help" for information.
  5.  
  6. LSNRCTL> set current_listener binzhang
  7. Current Listener is binzhang
  8.  
  9. LSNRCTL> status
  10. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(Host=oradb)(Port=1521)))
  11. STATUS of the LISTENER
  12. ------------------------
  13. Alias                     ORADB_LISTENER
  14. Version                   TNSLSNR for Solaris: Version 9.2.0.5.0 - Production
  15. Start Date                30-MAR-2006 00:28:27
  16. Uptime                    466 days 0 hr. 20 min. 37 sec
  17. Trace Level               off
  18. Security                  OFF
  19. SNMP                      OFF
  20. Listener Parameter File   /oracle/ORADB/home/products/9205/network/admin/listener.ora
  21. Listener Log File         /oracle/ORADB/home/products/9205/network/log/ORADB_listener.log
  22. Services Summary...
  23.   ORADB                has 1 service handler(s)
  24.   ORADB                has 41 service handler(s)
  25. The command completed successfully
  26.  
  27. LSNRCTL> version
  28. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(Host=oradb)(Port=1521)))
  29. TNSLSNR for Solaris: Version 9.2.0.5.0 - Production
  30.         TNS for Solaris: Version 9.2.0.5.0 - Production
  31.         Unix Domain Socket IPC NT Protocol Adaptor for Solaris: Version 9.2.0.5.0 - Production
  32.         Oracle Bequeath NT Protocol Adapter for Solaris: Version 9.2.0.5.0 - Production
  33.         TCP/IP NT Protocol Adapter for Solaris: Version 9.2.0.5.0 - Production,,
  34. The command completed successfully

设置密码并且禁止远程管理，就可以避免如上情况。如果Listener处于”裸奔”的情况下，则Oracle数据库就十分危险了。
See more at Oracle Database Listener Security Guide

Del.icio.us Google书签 Digg Live Bookmark Technorati Furl Yahoo书签 Facebook 百度搜藏 新浪 ViVi 365Key 网摘 天极网摘 和讯网摘 博拉网 POCO 网摘 饭否 QQ 书签 Digbuzz 我挖网 Mister Wong
No comments yet.