mirror/postgresql
2
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2025-02-05 19:09:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
30,438 Commits 37 Branches 638 Tags 434 MiB
C 85.5%
PLpgSQL 5.9%
Perl 4.2%
Yacc 1.3%
Makefile 0.7%
Other 2.2%
24d446b569
Go to file
Magnus Hagander 24d446b569 Fix low-risk potential denial of service against RADIUS login. 
Corrupt RADIUS responses were treated as errors and not ignored
(which the RFC2865 states they should be). This meant that a
user with unfiltered access to the network of the PostgreSQL
or RADIUS server could send a spoofed RADIUS response
to the PostgreSQL server causing it to reject a valid login,
provided the attacker could also guess (or brute-force) the
correct port number.

Fix is to simply retry the receive in a loop until the timeout
has expired or a valid (signed by the correct RADIUS server)
packet arrives.

Reported by Alan DeKok in bug #5687.
2010-10-15 16:59:12 +02:00
config Fix remaining stray references to CVS. 2010-09-22 19:51:46 -04:00
contrib Have pg_upgrade use strtoul(), not strtol(). 2010-09-29 02:40:26 +00:00
doc Correct WAL space calculation formula in docs. 2010-10-15 10:19:10 +01:00
src Fix low-risk potential denial of service against RADIUS login. 2010-10-15 16:59:12 +02:00
.gitignore Convert cvsignore to gitignore, and add .gitignore for build targets. 2010-09-22 12:57:06 +02:00
aclocal.m4
configure Tag 9.0.1 2010-10-01 10:28:42 -03:00
configure.in Tag 9.0.1 2010-10-01 10:28:42 -03:00
COPYRIGHT
GNUmakefile.in Back-patch replacement of README.CVS with README.git. 2010-09-21 14:42:58 -04:00
Makefile Add new make targets "world", "install-world" and "installcheck-world" to build, install and check just about everything. 2010-01-28 23:59:52 +00:00
README
README.git Back-patch replacement of README.CVS with README.git. 2010-09-21 14:42:58 -04:00

README 

PostgreSQL Database Management System
=====================================
  
This directory contains the source code distribution of the PostgreSQL
database management system.

PostgreSQL is an advanced object-relational database management system
that supports an extended subset of the SQL standard, including
transactions, foreign keys, subqueries, triggers, user-defined types
and functions.  This distribution also contains C language bindings.

PostgreSQL has many language interfaces, many of which are listed here:

	http://www.postgresql.org/download

See the file INSTALL for instructions on how to build and install
PostgreSQL.  That file also lists supported operating systems and
hardware platforms and contains information regarding any other
software packages that are required to build or run the PostgreSQL
system.  Changes between all PostgreSQL releases are recorded in the
file HISTORY.  Copyright and license information can be found in the
file COPYRIGHT.  A comprehensive documentation set is included in this
distribution; it can be read as described in the installation
instructions.

The latest version of this software may be obtained at
http://www.postgresql.org/download/.  For more information look at our
web site located at http://www.postgresql.org/.