pg.ddx.io  pgsql-interfaces@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Ravil Aitov <ravil@pi8plus.ru>
To: pgsql-interfaces@postgresql.org
Subject: Problem: Security loose
Date: Fri, 11 May 2001 17:23:50 +0400
Message-ID: <010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru> (raw)

Any user can connect to server (postgresql-7.1) as "postgres" using Perl
interface:
----
use Pg;
$conn = Pg::connectdb("dbname=mydb user=postgres");
(and make there anything!)
----
How it can be eliminated?

Ravil D. Aitov




view thread (2+ messages)  latest in thread

Message-ID: <010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru>
Permalink:  ../010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru/
Also on:    postgresql.org/message-id/010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-interfaces@postgresql.org
  Cc: ravil@pi8plus.ru
  Subject: Re: Problem: Security loose
  In-Reply-To: <010c01c0da1d$9e850b80$ed56fea9@pi8plus.ru>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox