Re: [GENERAL] PostgreSQL 7.2.2: Security Release

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: [GENERAL] PostgreSQL 7.2.2: Security Release
Дата
Msg-id 200208241123.g7OBNmS08909@candle.pha.pa.us
обсуждение исходный текст
Ответ на Re: [GENERAL] PostgreSQL 7.2.2: Security Release  (Neil Conway <neilc@samurai.com>)
Список pgsql-hackers
Neil Conway wrote:
> Bruce Momjian <pgman@candle.pha.pa.us> writes:
> > The issue is data-provoked crashes vs. query-invoked crashes.  Marc's
> > point, and I think it was clear enough, is that you can't just poke at
> > the TCP port and hope to do anything bad, which was the thrust of the
> > argument, I think.
> 
> The point I objected to is the suggestion that only those running
> "shared" or "open" systems are vulnerable to the security
> problem. That is simply incorrect.

Yes, I remember now.  It is a bad data vunerability vs. a bad query
vulnerability.

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
359-1001+  If your life is a hard drive,     |  13 Roberts Road +  Christ can be your backup.        |  Newtown Square,
Pennsylvania19073
 


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Delayed...
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: Delayed...