Re: Dissecting PostgreSQL CVE-2013-1899 (blackwinghq.com)

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Robert Bernier <robert(at)pg-live(dot)info>
Cc: PostgreSQL Advocacy <pgsql-advocacy(at)postgresql(dot)org>
Subject: Re: Dissecting PostgreSQL CVE-2013-1899 (blackwinghq.com)
Date: 2013-04-11 15:05:51
Message-ID: 20130411150551.GB6028@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-advocacy

On Thu, Apr 11, 2013 at 07:51:01AM -0700, Robert Bernier wrote:
> Comments?
>
> http://blog.blackwinghq.com/2013/04/08/2/

It is interesting how they try to combine the write ability to a web
server or postgres .profile file; I find the .profile particularly
nasty.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +

In response to

Responses

Browse pgsql-advocacy by date

  From Date Subject
Next Message Selena Deckelmann 2013-04-11 17:15:34 Re: Dissecting PostgreSQL CVE-2013-1899 (blackwinghq.com)
Previous Message Robert Bernier 2013-04-11 14:51:01 Dissecting PostgreSQL CVE-2013-1899 (blackwinghq.com)