Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2009-3230HistorySep 17, 2009 - 10:30 a.m.
Vulnerability in core server (CVE-2009-3230)
2009-09-1710:30:00
PostgreSQL Global Development Group
www.postgresql.org
88
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
74.1%
The fix for issue CVE-2007-6600 (below) failed to include protection against misuse of RESET SESSION AUTHORIZATION.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 7.4.26 | |
| postgresql | lt | 8.1.18 | |
| postgresql | lt | 8.4.1 | |
| postgresql | lt | 8.3.8 | |
| postgresql | lt | 8.0.22 | |
| postgresql | lt | 8.2.14 |
References
Related
oraclelinux
oraclelinux
postgresql security update
2009-10-07 00:00:00
postgresql security update
2009-10-07 00:00:00
postgresql security update
2010-05-19 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1485
2009-10-13 00:00:00
RedHat Security Advisory RHSA-2009:1485
2009-10-13 00:00:00
CentOS Security Advisory CESA-2009:1485 (postgresql)
2009-10-13 00:00:00
centos
centos
rh security update
2009-10-07 21:13:30
postgresql security update
2009-10-09 15:00:55
veracode
veracode
Privilege Escalation
2020-04-10 00:37:07
redhat
redhat
(RHSA-2009:1485) Moderate: postgresql security update
2009-10-07 00:00:00
(RHSA-2009:1484) Moderate: postgresql security update
2009-10-07 00:00:00
nessus
nessus
RHEL 3 : postgresql (RHSA-2009:1485)
2009-10-08 00:00:00
Oracle Linux 3 : postgresql (ELSA-2009-1485)
2013-07-12 00:00:00
CentOS 3 : postgresql (CESA-2009:1485)
2009-10-08 00:00:00
cve
cve
CVE-2009-3230
2009-09-17 10:30:00
CVE-2009-4136
2009-12-15 18:30:00
prion
prion
Authorization
2009-09-17 10:30:00
Sql injection
2009-12-15 18:30:00
ubuntucve
ubuntucve
CVE-2009-3230
2009-09-17 00:00:00
CVE-2009-4136
2009-12-15 00:00:00
securityvulns
securityvulns
PostgreSQL multiple security vulnerabilities
2009-09-22 00:00:00
[USN-834-1] PostgreSQL vulnerabilities
2009-09-22 00:00:00
[ MDVSA-2009:333 ] postgresql
2009-12-15 00:00:00
debian
debian
[SECURITY] [DSA 1900-1] New PostgreSQL packages fix various problems
2009-10-02 19:09:39
osv
osv
postgresql-7.4 postgresql-8.1 postgresql-8.3 - various problems
2009-10-02 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2009-09-21 00:00:00
freebsd
freebsd
postgresql -- multiple vulnerabilities
2009-11-20 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2011-10-25 00:00:00
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
74.1%
Related for POSTGRESQL:CVE-2009-3230