Postgres Pro
Downloads
Home   >   mailing lists

Re: Security problem in psql frontends - Mailing list pgsql-bugs

From Tom Lane
Subject Re: Security problem in psql frontends
Date
Msg-id 9388.974129861@sss.pgh.pa.us
Whole thread Raw
In response to Security problem in psql frontends  (pgsql-bugs@postgresql.org)
List pgsql-bugs
Tree view 
pgsql-bugs@postgresql.org writes:
> I can connect to the database with a valid username and with a false
> password. Why ?

No doubt it's because you've got pg_hba.conf set to "trust" ...
passwords aren't checked unless pg_hba.conf specifies a password-
based authentication mechanism.  See
http://www.postgresql.org/users-lounge/docs/7.0/postgres/security.htm

            regards, tom lane

pgsql-bugs by date:

Previous
From: "Erdei Csaba"
Date:
Subject: Csaba Erdei : Security problem in psql frontends
Next
From: pgsql-bugs@postgresql.org
Date:
Subject: JDBC driver DatabaseMetaData.getTables() unconditionally lowercases tableName pattern