Re:Dissecting PostgreSQL CVE-2013-1899
by agwa on Wednesday April 10, 2013 @07:58PM
(#5529052)
Nice article.
> Now we have to wait for an administrator to “su – postgres”. Likely? Eh.
This isn't that unlikely. On Debian/Ubuntu, postgres is the database super user and doesn't have a password set by default so the way to administer PostgreSQL is to su to postgres and then run psql/createdb/etc (it relies on local ident authentication).
> Now we have to wait for an administrator to “su – postgres”. Likely? Eh.
This isn't that unlikely. On Debian/Ubuntu, postgres is the database super user and doesn't have a password set by default so the way to administer PostgreSQL is to su to postgres and then run psql/createdb/etc (it relies on local ident authentication).