pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedThe default database account can be accessed without a password
4+ messages / 3 participants
[nested] [flat]
* The default database account can be accessed without a password
@ 2020-09-22 13:33 MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
0 siblings, 1 reply; 4+ messages in thread
From: MUKESH PRASAD @ 2020-09-22 13:33 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Hi Experts, I am getting VA with CVE I'd 1999-0508 where it says my default database is unpassword. However I checked all the dB with \l command and In none of the database I am able to login without password.
It refers to the default postgres user and I have changed password too multiple times but still it complaints.
Pls help
Sent from Yahoo Mail on Android
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: The default database account can be accessed without a password
@ 2020-09-22 13:40 Geoff Winkless <pgsqladmin@geoff.dj>
parent: MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
0 siblings, 1 reply; 4+ messages in thread
From: Geoff Winkless @ 2020-09-22 13:40 UTC (permalink / raw)
To: MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>; +Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
On Tue, 22 Sep 2020 at 14:33, MUKESH PRASAD
<mukeshprasad_hit@yahoo.co.in> wrote:
> I am getting VA with CVE I'd 1999-0508 where it says my default database is unpassword. However I checked all the dB with \l command and In none of the database I am able to login without password.
>
> It refers to the default postgres user and I have changed password too multiple times but still it complaints.
Do you have "trust" for any lines in pg_hba.conf?
Geoff
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: The default database account can be accessed without a password
@ 2020-09-22 14:07 MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
parent: Geoff Winkless <pgsqladmin@geoff.dj>
0 siblings, 1 reply; 4+ messages in thread
From: MUKESH PRASAD @ 2020-09-22 14:07 UTC (permalink / raw)
To: Geoff Winkless <pgsqladmin@geoff.dj>; pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Hi Geoff, Yes it is allowed for all the hosts in same subnet.
host all all 10.10.10.0/24 trust
Regards,Mukesh Prasad
Sent from Yahoo Mail on Android
On Tue, 22 Sep 2020 at 7:10 PM, Geoff Winkless<pgsqladmin@geoff.dj> wrote: On Tue, 22 Sep 2020 at 14:33, MUKESH PRASAD
<mukeshprasad_hit@yahoo.co.in> wrote:
> I am getting VA with CVE I'd 1999-0508 where it says my default database is unpassword. However I checked all the dB with \l command and In none of the database I am able to login without password.
>
> It refers to the default postgres user and I have changed password too multiple times but still it complaints.
Do you have "trust" for any lines in pg_hba.conf?
Geoff
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: The default database account can be accessed without a password
@ 2020-09-24 08:18 Ganesh Korde <ganeshakorde@gmail.com>
parent: MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
0 siblings, 0 replies; 4+ messages in thread
From: Ganesh Korde @ 2020-09-24 08:18 UTC (permalink / raw)
To: MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>; +Cc: Geoff Winkless <pgsqladmin@geoff.dj>; pgsql-admin@lists.postgresql.org
You need to change it to md5.
On Tue, 22 Sep 2020, 7:38 pm MUKESH PRASAD, <mukeshprasad_hit@yahoo.co.in>
wrote:
> Hi Geoff,
> Yes it is allowed for all the hosts in same subnet.
>
> host all all 10.10.10.0/24 trust
>
> Regards,
> Mukesh Prasad
>
> Sent from Yahoo Mail on Android
> <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__Android...;
>
> On Tue, 22 Sep 2020 at 7:10 PM, Geoff Winkless
> <pgsqladmin@geoff.dj> wrote:
> On Tue, 22 Sep 2020 at 14:33, MUKESH PRASAD
>
> <mukeshprasad_hit@yahoo.co.in> wrote:
> > I am getting VA with CVE I'd 1999-0508 where it says my default database
> is unpassword. However I checked all the dB with \l command and In none of
> the database I am able to login without password.
> >
> > It refers to the default postgres user and I have changed password too
> multiple times but still it complaints.
>
>
> Do you have "trust" for any lines in pg_hba.conf?
>
> Geoff
>
>
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2020-09-24 08:18 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-09-22 13:33 The default database account can be accessed without a password MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
2020-09-22 13:40 ` Geoff Winkless <pgsqladmin@geoff.dj>
2020-09-22 14:07 ` MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
2020-09-24 08:18 ` Ganesh Korde <ganeshakorde@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox