DB: Oracle Username Dump
This signature detects attempts to exploit a known vulnerability against an Oracle database. Attackers can send SQL queries for the list of all usernames permitted to access the database. Although these queries can occur during normal DB operations, they can indicate that an attacker is attempting to enumerate valid DB users.
Extended Description
An attempt to obtain the list of all the user names in an Oracle database may indicate that a SQL injection attack attempt is underway.
Short Name
DB:ORACLE:USERNAME-DUMP
Severity
Warning
Recommended
False
Recommended Action
None
Category
DB
Keywords
Dump Oracle Username
Release Date
09/16/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Rarely