Create user to Sysdba - oracleforensics.com

2 2. CREATE USER to SYSDBA via Namespace Overriding ~ The Threat CREATE USER to SYSDBA privilege escalation can be done by making a copy of a legitimate Built-in SYS function and putting it in a newly created schema which has a username equal to the SYS package name. This attacker supplied function overrides the namespace of the SYS function so that a DBA user logged in as SYS will … ................
................