Oracle Error Case: ORA-00922

ORA-00922 Missing or invalid option

0ra-00922: Missing or invalid option

Cause an invalid option is specified in defining a column or storage clause. The valid option in specifying a, NOT NULL to specify, the column cannot contain any NULL values. Only constraints may follow the datatype. Specifying a maximum length on a DATE or LONG datatype also causes this error.

Action Correct the syntax. Remove the erroneous option or length specification from the column or storage specification.

Case one: Oracle plaintext Password vulnerability

Affected Systems:

Oracle oracle10g Application Server 9.0.4.0

Oracle oracle10g Application Server 10.1.0.2

Describe:

Oracle database is a large, commercial, and data-base system.

Oracle 10g has a global readable file containing plaintext passwords that can be exploited by local attackers to gain access to the database.

The password for the Sysman account can be obtained in the ' $ORACLE _home/hostname_sid/sysman/config/emoms.properties ' file, which is globally readable.

In addition, if you install Oracle 10g with the same password for sys, SYSTEM, DBSNMP, and Sysman accounts, and the password has an exclamation point (such as f00bar!!), the DB installation error occurs when you set the Sysman and DBSNMP password, error message " PostDBCreation.log will record the password:

Alter user Sysman identified by f00bar!! Account unlock

ERROR at line 1:

ora-00922:missing or Invalid option

Alter user DBSNMP identified by f00bar!! Account unlock

ERROR at line 1:

ora-00922:missing or Invalid option