Postgres Pro
Downloads
Home   >   mailing lists

Re: [SECURITY] DoS attack on backend possible (was: Re: - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [SECURITY] DoS attack on backend possible (was: Re:
Date
Msg-id 14467.1029085781@sss.pgh.pa.us
Whole thread Raw
In response to Re: [SECURITY] DoS attack on backend possible (was: Re:  (Justin Clift <justin@postgresql.org>)
Responses Re: [SECURITY] DoS attack on backend possible (was: Re:  ("Christopher Kings-Lynne" <chriskl@familyhealth.com.au>)
Re: [SECURITY] DoS attack on backend possible (was: Re:  (Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>)
Re: [SECURITY] DoS attack on backend possible (was: Re:  (Greg Copeland <greg@CopelandConsulting.Net>)
List pgsql-hackers
Tree view 
Justin Clift <justin@postgresql.org> writes:
> Am I understanding this right:
>  - A PostgreSQL 7.2.1 server can be crashed if it gets passed certain
> date values which would be accepted by standard "front end" parsing? 

AFAIK it's a buffer overrun issue, so anything that looks like a
reasonable date would *not* cause the problem.
        regards, tom lane

pgsql-hackers by date:

Previous
From: Justin Clift
Date:
Subject: Re: [SECURITY] DoS attack on backend possible (was: Re:
Next
From: Joe Conway
Date:
Subject: Re: [GENERAL] workaround for lack of REPLACE() function