Comments on: Running a Windows Batch file from DBMS_SCHEDULER http://mikesmithers.wordpress.com/2012/06/12/running-a-windows-batch-file-from-dbms_scheduler/ Oracle - for when it was like that when you got there Wed, 01 May 2013 11:15:26 +0000 hourly 1 http://wordpress.com/ By: mikesmithers http://mikesmithers.wordpress.com/2012/06/12/running-a-windows-batch-file-from-dbms_scheduler/#comment-19288 Thu, 14 Jun 2012 12:32:31 +0000 http://mikesmithers.wordpress.com/?p=1372#comment-19288 Sean,
the issue, or potential issue, is that by granting a database user the CREATE EXTERNAL JOB privilege, you implicitly give them the same privileges on the Database Server as the OS user who starts the OracleJobScheduler service. If this happens to be the Administrator user, you are then able to do anything you like on the server from the database account. Remember, you don’t have to execute a batch script, you can just pass in a DOS command to the job you create.
This is less of an issue in 11g (see the link in the post).

HTH

Mike

]]> By: Sean Molloy http://mikesmithers.wordpress.com/2012/06/12/running-a-windows-batch-file-from-dbms_scheduler/#comment-19221 Tue, 12 Jun 2012 15:09:18 +0000 http://mikesmithers.wordpress.com/?p=1372#comment-19221 Can you explain the security issue?

]]>