Oracle Database Discussions

Hi all,

Do you have any comments on the following, are they valid and true:

Create view privilege escalation is possible. Any valid database user with read-only access to a table can also modify data from it. One effect of this is that the default 'DBSNMP' user, which has the 'SELECT ANY DICTIONARY' privilege, can change the password for ANY user by directly updating the SYS.USER$ table in the data dictionary.

Thanks in advance for any input.