Re: Postgres buffer overflow in stable .

2002-09-12 Thread Florian Weimer
Jean-Francois Dive <[EMAIL PROTECTED]> writes: > The bug 155419 opened 37 days old point to a serious security issue > with postgres as i can lead to DOS from local users You can't get rid of the authenticated user DoS easily, see 160673. This requires the ability to execute arbitrary SQL stateme

Re: Postgres buffer overflow in stable .

2002-09-11 Thread Oliver Elphick
On Wed, 2002-09-11 at 03:39, Jean-Francois Dive wrote: > Hello all, > > The bug 155419 opened 37 days old point to a serious security issue with > postgres > as i can lead to DOS from local users or worst, make non-serious SQL / perl > / php > bugs worst (from non exploitable to DOS capable). A

Postgres buffer overflow in stable .

2002-09-10 Thread Jean-Francois Dive
Hello all, The bug 155419 opened 37 days old point to a serious security issue with postgres as i can lead to DOS from local users or worst, make non-serious SQL / perl / php bugs worst (from non exploitable to DOS capable). As far as i can see, Oliver tried to upload 7.2.2-X in woody and i su