BugTraq
Having Fun With PostgreSQL Jun 16 2007 05:11PM
Nico Leidecker (nicoLeidecker web de) (2 replies)
Re: Having Fun With PostgreSQL Jun 18 2007 08:16PM
Frank Berek (frank berek arcor de)
Re: Having Fun With PostgreSQL Jun 18 2007 12:56PM
Ray Stell (stellr cns vt edu)

It would probably be fair to mention that dblink is not a product that
is installed by default in pg.

On Sat, Jun 16, 2007 at 07:11:47PM +0200, Nico Leidecker wrote:
> Dear list,
>
> I'd like to present a paper about security issues with PostgreSQL. The paper describes weaknesses in the configuration that may allow attackers to escalade privileges, execute shell commands and to upload arbitrary (binary) files via SQL injections.
>
> You can either get the TXT version from http://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt
> Or as PDF at at http://www.portcullis.co.uk/uplds/whitepapers/Having_Fun_With_PostgreSQL
.pdf
>
> The paper comes with a tool called `pgshell' that can be downloaded at http://www.leidecker.info/pgshell/
>
> Cheers,
> Nico
>
> _____________________________________________________________________
> Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
> http://smartsurfer.web.de/?mc=100071&distributionid=000000000066

--
Lost time is when we learn nothing from the experiences of life. Time
gained is when we grow to have a wisdom that is tested in the reality of life.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus