Re: JDBC Driver Authentication Bug

From: "Peter Mount" <peter(at)retep(dot)org(dot)uk>
To: <cheeren(at)cheeren(dot)com>, <pgsql-bugs(at)postgresql(dot)org>
Subject: Re: JDBC Driver Authentication Bug
Date: 2001-01-10 22:22:04
Message-ID: 000001c07d6c$c85dbbe0$0204a8c0@retep.org.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Sorry for the delay.

What is the setting in pg_hba.conf? It sounds like this is set to trust
which would produce this affect.

Peter

----- Original Message -----
From: <pgsql-bugs(at)postgresql(dot)org>
To: <pgsql-bugs(at)postgresql(dot)org>
Sent: Saturday, December 16, 2000 4:04 AM
Subject: [BUGS] JDBC Driver Authentication Bug

> Cheeren Shieh (cheeren(at)cheeren(dot)com) reports a bug with a severity of 2
> The lower the number the more severe it is.
>
> Short Description
> JDBC Driver Authentication Bug
>
> Long Description
> If the userid is valid, even though null password or wrong password is
sent to server with JDBC Driver, the authentication still pass!
> What is a terrible bug!
> The JDBC Driver is "jdbc7.0-1.2.jar".
>
> Sample Code
>
>
> No file was uploaded with this report
>

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message Michael Richards 2001-01-11 00:52:23 CONSTRAINT problems
Previous Message Jos Antonio Matute Calvo 2001-01-10 16:31:30 jdbc driver: Support for 'BOOL'