Re: [GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Mads . Tandrup
Hi Bruce.Didn't catch that in the announcement.Thanks for clearing out the confusion.Best regards,Mads

Re: [GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Bruce Momjian
On Thu, Apr 4, 2013 at 06:39:22PM +0200, mads.tand...@schneider-electric.com wrote: > Hi All > > I'm trying to understand the implications of the latest security fix to > postgresql [1]. > > We have a setup were we in pg_hba.conf have limited the allowed IP addresses > of > the clients. But do

Re: [GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Devrim Gündüz
Hi, pg_hba.conf does not have protection for this security issue. Regards, Devrim mads.tand...@schneider-electric.com wrote: >Hi All > > >I'm trying to understand the implications of the latest security fix to >postgresql [1]. > > >We have a setup were we in pg_hba.conf have limited the allowed

[GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Mads . Tandrup
Hi AllI'm trying to understand the implications of the latest security fix to postgresql [1].We have a setup were we in pg_hba.conf have limited the allowed IP addresses of the clients. But does anyone know if CVE-2013-1899 allows an arbitrary attacker to use the exploits described in [1]?We are us