《关于ORACLE 11G密码大小写敏感猜想(USER$.SPARE4)》的评论 https://www.xifenfei.com/2013/05/%e5%85%b3%e4%ba%8eoracle-11g%e5%af%86%e7%a0%81%e5%a4%a7%e5%b0%8f%e5%86%99%e6%95%8f%e6%84%9f%e7%8c%9c%e6%83%b3user-spare4.html 提供7*24专业数据库(Oracle,SQL Server,MySQL,PostgreSQL等)恢复和技术支持@Tel:17813235971 Thu, 11 Dec 2025 02:46:14 +0000 hourly 1 作者：惜分飞 https://www.xifenfei.com/2013/05/%e5%85%b3%e4%ba%8eoracle-11g%e5%af%86%e7%a0%81%e5%a4%a7%e5%b0%8f%e5%86%99%e6%95%8f%e6%84%9f%e7%8c%9c%e6%83%b3user-spare4.html/comment-page-1#comment-1484 Wed, 15 May 2013 15:48:17 +0000 https://www.xifenfei.com/?p=4396#comment-1484 11g在user$中存储密码在password不区分大小写,主要在spare4中错判断

SQL> create user b_s identified by xifenfei;                    

User created.

SQL> select password,spare4 from user$ where name='B_S';

PASSWORD                       SPARE4
------------------------------ ----------------------------------------------------------------------
E76720343768E75A               S:78697227B49E702E405D08B0B4C0151FC1999808212AEDF1173EB7D46604

SQL> drop user b_s;

User dropped.

SQL> create user b_s identified by XIFENFEI;

User created.

SQL> select password,spare4 from user$ where name='B_S';

PASSWORD                       SPARE4
------------------------------ ----------------------------------------------------------------------
E76720343768E75A               S:A5C5526CCEFFF6EA4FE19534C199146C4088CEDC9C9920B466ACE7FB1694
]]> 作者：惜分飞 https://www.xifenfei.com/2013/05/%e5%85%b3%e4%ba%8eoracle-11g%e5%af%86%e7%a0%81%e5%a4%a7%e5%b0%8f%e5%86%99%e6%95%8f%e6%84%9f%e7%8c%9c%e6%83%b3user-spare4.html/comment-page-1#comment-1483 Wed, 15 May 2013 15:44:02 +0000 https://www.xifenfei.com/?p=4396#comment-1483 dba_users.password_versions的定义为:DECODE (LENGTH (user$.password), 16, ’10G ‘, NULL) || NVL2 (user$.spare4, ’11G ‘, NULL),

]]>