[GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Mads . Tandrup
Hi AllI'm trying to understand the implications of the latest security fix to postgresql [1].We have a setup were we in pg_hba.conf have limited the allowed IP addresses of the clients. But does anyone know ifCVE-2013-1899 allows an arbitrary attacker to use the exploits described in [1]?We are

Re: [GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Devrim Gündüz
Hi, pg_hba.conf does not have protection for this security issue. Regards, Devrim mads.tand...@schneider-electric.com wrote: Hi All I'm trying to understand the implications of the latest security fix to postgresql [1]. We have a setup were we in pg_hba.conf have limited the allowed IP

Re: [GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Bruce Momjian
On Thu, Apr 4, 2013 at 06:39:22PM +0200, mads.tand...@schneider-electric.com wrote: Hi All I'm trying to understand the implications of the latest security fix to postgresql [1]. We have a setup were we in pg_hba.conf have limited the allowed IP addresses of the clients. But does

Re: [GENERAL] CVE-2013-1899 security issue and limited IP addresses in pg_hba.conf

2013-04-04 Thread Mads . Tandrup
Hi Bruce.Didn't catch that in the announcement.Thanks for clearing out the confusion.Best regards,Mads