Magnus Hagander 24d446b569 Fix low-risk potential denial of service against RADIUS login. ...

Corrupt RADIUS responses were treated as errors and not ignored
(which the RFC2865 states they should be). This meant that a
user with unfiltered access to the network of the PostgreSQL
or RADIUS server could send a spoofed RADIUS response
to the PostgreSQL server causing it to reject a valid login,
provided the attacker could also guess (or brute-force) the
correct port number.

Fix is to simply retry the receive in a loop until the timeout
has expired or a valid (signed by the correct RADIUS server)
packet arrives.

Reported by Alan DeKok in bug #5687.

2010-10-15 16:59:12 +02:00

..

backend

Fix low-risk potential denial of service against RADIUS login.

2010-10-15 16:59:12 +02:00

bin

Translation updates for 9.0.1

2010-09-30 23:46:16 +03:00

include

Tag 9.0.1

2010-10-01 10:28:42 -03:00

interfaces

Applied patch by Itagaki Takahiro to fix incorrect status calculation in

2010-10-14 17:49:01 +02:00

makefiles

Allow for LDFLAGS_SL already having a value in Makefile.aix.

2010-07-06 03:41:02 +00:00

pl

Fix plpython so that it again honors typmod while assigning to tuple fields.

2010-10-11 22:16:46 -04:00

port

Tag 9.0.1

2010-10-01 10:28:42 -03:00

template

Don't try to force use of -no-cpp-precomp on OS X. It's been five years

2010-08-02 04:51:25 +00:00

test

Fix PlaceHolderVar mechanism's interaction with outer joins.

2010-09-28 14:18:22 -04:00

timezone

Convert cvsignore to gitignore, and add .gitignore for build targets.

2010-09-22 12:57:06 +02:00

tools

Remove excess argument to open(2).

2010-10-02 18:40:48 -04:00

tutorial

Remove copyright mention of Andrew Yu, per author's permission.

2010-02-02 18:52:02 +00:00

.gitignore

Convert cvsignore to gitignore, and add .gitignore for build targets.

2010-09-22 12:57:06 +02:00

bcc32.mak

…

DEVELOPERS

Replace a couple of references to files that no longer exist in the source

2009-05-04 08:08:47 +00:00

Makefile

Rethink the way walreceiver is linked into the backend. Instead than shoving

2010-01-20 09:16:24 +00:00

Makefile.global.in

Accept slightly grotty coding in Makefile.global in order to keep the -L

2010-07-06 22:03:05 +00:00

Makefile.shlib

Still more third thoughts: when linking shared libraries, LDFLAGS probably

2010-07-06 03:55:33 +00:00

nls-global.mk

Avoid error from mkdir if no languages are to be installed

2010-05-13 14:35:28 +00:00

win32.mak

Update supported standalone VC++ version to 7.1+ only, and fix

2007-08-03 10:47:11 +00:00