Re: EMBEDDED PostgreSQL - Mailing list pgsql-general

From John DeSoi
Subject Re: EMBEDDED PostgreSQL
Date
Msg-id 41F1F8D7-6F2A-11D9-BDFB-000A95B03262@pgedit.com
Whole thread Raw
In response to Re: EMBEDDED PostgreSQL  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Hi Tom,

On Jan 25, 2005, at 4:35 PM, Tom Lane wrote:

> Sorry, but any Windows user who thinks he doesn't need security
> measures
> equivalent to (not "beyond") minimum Unix practice is a dummy about
> security.  Take a look at this LOAD vulnerability we're in the midst of
> patching, and ask yourself whether you aren't glad that it can't be
> used
> to get admin privileges on your Windows box.

So a vulnerability exists on Windows even if PostgreSQL is only
accepting local connections?

The poster asked about embedded databases and that is what I'm trying
to address. I realize this has been thoroughly hashed about in the
archives, but I don't recall any discussion of PotgreSQL 8 on Windows.

Thanks,


John DeSoi, Ph.D.
http://pgedit.com/
Power Tools for PostgreSQL


pgsql-general by date:

Previous
From: "Jim C. Nasby"
Date:
Subject: Re: How are foreign key constraints built?
Next
From: John Gray
Date:
Subject: Re: xpath_list() question for contrib/xml2