Oracle releases a default password scanner
As reported by Computerworld, Oracle released a tool designed to find default passwords in its database software (among several other critical patches).
While default accounts have been locked down in current versions of the database, Oracle 10g databases that have been upgraded from Oracle 7, Oracle8i, or Oracle9i may include them.
The Oracle Default Password Scanner consists in a SQL script accessible to Oracle customers in MetaLink Note 361482.1.
It should be noted that Cain & Abel carries features to crack and extract Oracle passwords.
