sqlite: unauthorized information access
sqlite: unauthorized information access
Posted Feb 12, 2010 17:58 UTC (Fri) by nlucas (subscriber, #33793)Parent article: sqlite: unauthorized information access
This seems to me more like a bug (in the sense that it doesn't work as documented) than any real security problem.
If you have access to the file after the delete, then you also have access to the file before the delete, meaning you already can read whatever it is there.
The only security problem would be if using an encrypted sqlite database you could gain access to unencrypted data after a delete, which doesn't seem to be the problem.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.
