Re: a vulnerability in PostgreSQL

From: Tatsuo Ishii <t-ishii(at)sra(dot)co(dot)jp>
To: lyeoh(at)pop(dot)jaring(dot)my
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: a vulnerability in PostgreSQL
Date: 2002-05-02 08:50:46
Message-ID: 20020502175046X.t-ishii@sra.co.jp
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> Not tested: but how about the string being
> foo'; DROP TABLE T1; foo
>
> Would the last ' be eaten up then resulting in no error?

Even the last ' is eaten up, the remaining string is (81a2), which
would cause parser errors since they are not valid SQL, I think.

> Also normally a \ would be quoted by \\ right? Would a foo\ result in an
> unquoted \ ? An unquoted backslash may allow some possibilities.
>
> There could be other ways to get rid of the last ', comments etc, so it may
> not be just 6.5.x.

Please provide concrete examples. I could not find such that case.
--
Tatsuo Ishii

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Lincoln Yeoh 2002-05-02 08:51:15 Re: a vulnerability in PostgreSQL
Previous Message Tatsuo Ishii 2002-05-02 08:18:30 a vulnerability in PostgreSQL