Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"

Поиск
Список
Период
Сортировка
От Asif Naeem
Тема Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"
Дата
Msg-id CAEB4t-O-Y3x2NdX5kXscQf-qxTtSGwgW6_Py4UY5xtc0BYh1FQ@mail.gmail.com
обсуждение исходный текст
Ответ на Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"  (Amit Kapila <amit.kapila16@gmail.com>)
Ответы Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"  (Sandeep Thakkar <sandeep.thakkar@enterprisedb.com>)
Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"  (Robert Haas <robertmhaas@gmail.com>)
Список pgsql-hackers
Дерево обсуждения
On Thu, Oct 31, 2013 at 10:17 AM, Amit Kapila <amit.kapila16@gmail.com> wrote:
On Tue, Oct 29, 2013 at 12:46 PM, Naoya Anzai
<anzai-naoya@mxu.nes.nec.co.jp> wrote:
> Hi Sandeep
>
>> I think, you should change the subject line  to "Unquoted service path containing space is vulnerable and can be exploited on Windows" to get the attention..  :)
> Thank you for advice!
> I'll try to post to pgsql-bugs again.

I could also reproduce this issue. The situation is very rare such
that an "exe" with name same as first part of directory should exist
in installation path.

I believe it is a security risk with bigger impact as it is related to Windows environment and as installers rely on it.
 
I suggest you can post your patch in next commit fest.

Yes. Are not vulnerabilities/security risk's taken care of more urgent bases ?
 
With Regards,
Amit Kapila.
EnterpriseDB: http://www.enterprisedb.com

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Amit Kapila
Дата:
Сообщение: Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"
Следующее
От: Sandeep Thakkar
Дата:
Сообщение: Re: PostgreSQL Service on Windows does not start. ~ "is not a valid Win32 application"