Description
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.
References
- 16258 vdb-entry
- VU#777773 third-party-advisory
- oracle-audit-data-manipulation(20407) vdb-entry
- http://www.red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html
- 20050505 Oracle 9i / 10g Fine Grained Auditing Issue mailing-list