BUG #5938: PostgreSQL Installer outputs log file with superuser password in clear text

From: "Craig Sacco" <craig(dot)sacco(at)gmail(dot)com>
To: pgsql-bugs(at)postgresql(dot)org
Subject: BUG #5938: PostgreSQL Installer outputs log file with superuser password in clear text
Date: 2011-03-22 05:10:53
Message-ID: 201103220510.p2M5Araq040388@wwwmaster.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs


The following bug has been logged online:

Bug reference: 5938
Logged by: Craig Sacco
Email address: craig(dot)sacco(at)gmail(dot)com
PostgreSQL version: 9.0.3
Operating system: Microsoft Windows (all variants, 32 and 64 bit)
Description: PostgreSQL Installer outputs log file with superuser
password in clear text
Details:

The PostgreSQL installer outputs a log file to the temporary directory with
the superuser password in clear text. We are deploying PostgreSQL as part of
a commercial product and would like to ensure that the password is not
available to ordinary users.

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Vincent Chan 2011-03-22 06:34:11 BUG #5939: About bytea
Previous Message Bernd Helmle 2011-03-21 16:44:41 Warm Standby startup process unconditionally hangs