UCF STIG Viewer Logo

The Oracle SID should not be the default SID.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3848 DO0221-ORACLE10 SV-24867r1_rule ECAN-1 Low
Description
Use of the default Oracle System Identifier (SID) leaves the database vulnerable to attacks that target Oracle installations running under default SID. Using a custom name helps protect the database against this kind of targeted attack.
STIG Date
Oracle 10 Database Instance STIG 2014-01-14

Details

Check Text ( None )
None
Fix Text (F-26450r1_fix)
Follow the instructions in Oracle MetaLink Note 15390.1 (and related documents) to change the SID for the database without re-creating the database to a value other than the application default.