Return-Path: 
 <derby-dev-return-70294-apmail-db-derby-dev-archive=db.apache.org@db.apache.org>
Delivered-To: apmail-db-derby-dev-archive@www.apache.org
Received: (qmail 27648 invoked from network); 30 Jun 2009 14:36:01 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 30 Jun 2009 14:36:01 -0000
Received: (qmail 89154 invoked by uid 500); 30 Jun 2009 14:36:11 -0000
Delivered-To: apmail-db-derby-dev-archive@db.apache.org
Received: (qmail 89128 invoked by uid 500); 30 Jun 2009 14:36:11 -0000
Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:derby-dev-help@db.apache.org>
List-Unsubscribe: <mailto:derby-dev-unsubscribe@db.apache.org>
List-Post: <mailto:derby-dev@db.apache.org>
List-Id: <derby-dev.db.apache.org>
Reply-To: <derby-dev@db.apache.org>
Delivered-To: mailing list derby-dev@db.apache.org
Received: (qmail 89120 invoked by uid 99); 30 Jun 2009 14:36:11 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 30 Jun 2009 14:36:11 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 30 Jun 2009 14:36:08 +0000
Received: from brutus (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id 55FDA234C045
	for <derby-dev@db.apache.org>; Tue, 30 Jun 2009 07:35:47 -0700 (PDT)
Message-ID: <821644032.1246372547351.JavaMail.jira@brutus>
Date: Tue, 30 Jun 2009 07:35:47 -0700 (PDT)
From: "Dag H. Wanvik (JIRA)" <jira@apache.org>
To: derby-dev@db.apache.org
Subject: [jira] Updated: (DERBY-3014) Make
 SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.user.<username>')  return
 NULL instead of the hash value of the password
In-Reply-To: <30829763.1187367991212.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org


     [ https://issues.apache.org/jira/browse/DERBY-3014?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dag H. Wanvik updated DERBY-3014:
---------------------------------

    Component/s: Services

> Make SYSCS_UTIL.SYSCS_GET_DATABASE_PROPERTY('derby.user.<username>')  return NULL instead of the hash value of the password
> ---------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DERBY-3014
>                 URL: https://issues.apache.org/jira/browse/DERBY-3014
>             Project: Derby
>          Issue Type: Improvement
>          Components: Services
>            Reporter: Daniel John Debrunner
>         Attachments: DERBY-3014.diff
>
>
> Increases security by providing less information to any attacker. The current returned hash value could be used in an off-line dictionary based attack to find a valid password.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.