Lucene search
GoogleOSV:DSA-2491-1HistoryJun 09, 2012 - 12:00 a.m.
postgresql-8.4 - several
2012-06-0900:00:00
Google
osv.dev
10
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
83.3%
Two vulnerabilities were discovered in PostgreSQL, an SQL database
server:
- CVE-2012-2143
The crypt(text, text) function in the pgcrypto contrib module
did not handle certain passwords correctly when producing
traditional DES-based hashes. Characters after the first
0x80 byte were ignored. - CVE-2012-2655
SECURITY DEFINER and SET attributes for a call handler of a
procedural language could crash the database server.
In addition, this update contains reliability and stability fixes from
the 8.4.12 upstream release.
For the stable distribution (squeeze), this problem has been fixed in
version 8.4.12-0squeeze1.
For the unstable distribution (sid), this problem has been fixed in
version 8.4.12-1.
We recommend that you upgrade your postgresql-8.4 packages.
References
Related
openvas
openvas
CentOS Update for postgresql CESA-2012:1037 centos6
2012-07-30 00:00:00
RedHat Update for postgresql and postgresql84 RHSA-2012:1037-01
2012-06-28 00:00:00
Debian Security Advisory DSA 2491-1 (postgresql-8.4)
2012-08-10 00:00:00
redhat
redhat
(RHSA-2012:1037) Moderate: postgresql and postgresql84 security update
2012-06-25 00:00:00
(RHSA-2012:1036) Moderate: postgresql security update
2012-06-25 00:00:00
(RHSA-2012:1047) Moderate: php53 security update
2012-06-27 00:00:00
nessus
nessus
Scientific Linux Security Update : postgresql and postgresql84 on SL5.x i386/x86_64 (20120625)
2012-08-01 00:00:00
Fedora 17 : postgresql-9.1.4-1.fc17 (2012-8924)
2012-06-18 00:00:00
Oracle Linux 5 / 6 : postgresql / postgresql84 (ELSA-2012-1037)
2013-07-12 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2491-1] postgresql-8.4 security update
2012-06-13 00:00:00
PostgreSQL security vulnerabilities
2012-06-13 00:00:00
FreeBSD crypt() implementation vulnerability
2012-05-31 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:42:10
Authentication Bypass
2019-01-15 08:53:32
Denial Of Service (DoS)
2019-05-02 04:42:13
debian
debian
[SECURITY] [DSA 2491-1] postgresql-8.4 security update
2012-06-09 11:57:54
ubuntu
ubuntu
PostgreSQL vulnerabilities
2012-06-05 00:00:00
PHP vulnerabilities
2012-06-19 00:00:00
centos
centos
postgresql, postgresql84 security update
2012-06-25 22:38:39
postgresql security update
2012-06-25 22:25:31
php53 security update
2012-06-27 20:24:26
amazon
amazon
Medium: postgresql8
2012-07-05 16:08:00
Medium: postgresql9
2012-06-19 16:02:00
Medium: php
2012-07-05 16:09:00
fedora
fedora
[SECURITY] Fedora 17 Update: postgresql-9.1.4-1.fc17
2012-06-15 12:27:43
[SECURITY] Fedora 17 Update: postgresql-9.1.5-1.fc17
2012-08-26 00:26:12
[SECURITY] Fedora 17 Update: postgresql-9.1.8-1.fc17
2013-02-17 03:30:04
cve
cve
CVE-2012-2655
2012-07-18 23:55:00
CVE-2012-2143
2012-07-05 14:55:00
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2012-06-25 00:00:00
postgresql security update
2012-06-25 00:00:00
php53 security update
2012-06-27 00:00:00
ubuntucve
ubuntucve
CVE-2012-2655
2012-06-05 00:00:00
CVE-2012-2143
2012-06-05 00:00:00
prion
prion
Code injection
2012-07-18 23:55:00
Default credentials
2012-07-05 14:55:00
postgresql
postgresql
Vulnerability in core server (CVE-2012-2655)
2012-07-18 23:55:00
Vulnerability in contrib module (CVE-2012-2143)
2012-07-05 14:55:00
seebug
seebug
PostgreSQL 'SECURITY DEFINER'ε'SET'ε±ζ§θΏη¨ζη»ζε‘ζΌζ΄
2012-06-06 00:00:00
freebsd
freebsd
FreeBSD -- Incorrect crypt() hashing
2012-05-30 00:00:00
databases/postgresql*-server -- crypt vulnerabilities
2012-05-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:02.crypt
2012-05-30 00:00:00
checkpoint_security
checkpoint_security
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2012-09-28 00:00:00
PHP: Multiple vulnerabilities
2012-09-24 00:00:00
suse
suse
Security update for PHP5 (important)
2012-07-05 03:08:30
f5
f5
SOL15903 - Multiple PHP vulnerabilities
2014-12-11 00:00:00
K15903 : Multiple PHP vulnerabilities
2014-12-11 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
83.3%
Related for OSV:DSA-2491-1