Forum OpenACS Q&A: Re: DB Proxy format string vulnerability

Collapse
3: Re: DB Proxy format string vulnerability (response to 1)
Posted by David Walker on 11/28/02 05:52 PM
Most openacs installs do not call for external db drivers.  Neither Postgres or Oracle use them.  Sybase is the only database I am aware of that uses external db drivers.

So unless you're using nsext.so for db connections I think you don't need to worry about this issue.

Collapse
4: Re: DB Proxy format string vulnerability (response to 3)
Posted by Larry Nguyen on 11/29/02 03:03 AM
Thanks a lot, David. I follow your tip on hiding server info, it works great.

I'm glad to hear about not worrying the format string vuln.