Oracle Default SID

This script is Copyright (C) 2006-2017 Tenable Network Security, Inc.

Synopsis :

It was possible to identify databases on the remote host.

Description :

The remote Oracle database server either contains one or more
databases that use well-known System Identifiers (SIDs) or supports
the 'services' command as a means of listing available SIDs on the
affected system.

Since an Oracle SID serves to uniquely identify a particular database
on a given host and is required when connecting to an Oracle database,
an attacker can leverage these SIDs to attempt to access databases on
the remote host.

Solution :

Change any SIDs that are identified.

Risk factor :


Family: Databases

Nessus Plugin ID: 22074 ()

Bugtraq ID:


Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now