| From: | Gavin Sherry <swm(at)linuxworld(dot)com(dot)au> |
|---|---|
| To: | Justin Clift <justin(at)postgresql(dot)org> |
| Cc: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: [SECURITY] DoS attack on backend possible (was: Re: |
| Date: | 2002-08-12 02:41:15 |
| Message-ID: | Pine.LNX.4.21.0208121240060.4133-100000@linuxworld.com.au |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers pgsql-hackers |
On Mon, 12 Aug 2002, Justin Clift wrote:
> Hi Chris,
>
> Christopher Kings-Lynne wrote:
> >
> <snip>
> > Still, I believe this should require a 7.2.2 release. Imagine a university
> > database server for a course for example - the students would just crash it
> > all the time.
>
> Hey yep, good point.
>
> Is this the only way that we know of non postgresql-superusers to be
> able to take out the server other than by extremely non-optimal,
> resource wasting queries?
>
Check the TODO:
You are now connected as new user s.
template1=> select cash_out(2);
server closed the connection unexpectedly
This probably means the server terminated abnormally
before or while processing the request.
The connection to the server was lost. Attempting reset: Failed.
!> \q
[swm(at)laptop a]$ bin/psql template1
psql: could not connect to server: Connection refused
Is the server running locally and accepting
connections on Unix domain socket "/tmp/.s.PGSQL.3987"?
[swm(at)laptop a]$
---
Gavin
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2002-08-12 03:15:17 | Re: TOAST & DROP COLUMN (Was: RE: pgsql-server/ oc/src/sgml/ref/cluster.sgml rc/ ... ) |
| Previous Message | Christopher Kings-Lynne | 2002-08-12 02:37:42 | Re: [SECURITY] DoS attack on backend possible (was: Re: |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Curt Sampson | 2002-08-12 02:46:06 | Re: OOP real life example (was Re: Why is MySQL more chosen |
| Previous Message | Christopher Kings-Lynne | 2002-08-12 02:37:42 | Re: [SECURITY] DoS attack on backend possible (was: Re: |