Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2012-0867HistoryJul 18, 2012 - 11:55 p.m.
Vulnerability in core server (CVE-2012-0867)
2012-07-1823:55:00
PostgreSQL Global Development Group
www.postgresql.org
568
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
73.1%
SSL certificate name checks are truncated to 32 characters, allowing connection spoofing under some circumstances when using third party certificate authorities.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 8.4.11 | |
| postgresql | lt | 9.1.3 | |
| postgresql | lt | 9.0.7 |
References
Related
prion
prion
Code injection
2012-07-18 23:55:00
ubuntucve
ubuntucve
CVE-2012-0867
2012-02-28 00:00:00
cve
cve
CVE-2012-0867
2012-07-18 23:55:00
securityvulns
securityvulns
PostgreSQL vulnerabilities
2012-03-09 00:00:00
[ MDVSA-2012:026 ] postgresql
2012-03-09 00:00:00
openvas
openvas
CentOS Update for postgresql CESA-2012:0678 centos6
2012-07-30 00:00:00
Mandriva Update for postgresql MDVSA-2012:026 (postgresql)
2012-03-07 00:00:00
Ubuntu Update for postgresql-9.1 USN-1378-1
2012-03-07 00:00:00
nessus
nessus
PostgreSQL 8.3.x < 8.3.18 Multiple Vulnerabilities
2012-02-28 00:00:00
PostgreSQL < 8.4.11 / 9.0.7 / 9.1.3 Multiple Vulnerabilities
2013-05-14 00:00:00
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2012-05-21 00:00:00
postgresql and postgresql84 security update
2012-06-25 00:00:00
veracode
veracode
Spoofing Vulnerability
2019-05-02 04:41:15
debian
debian
[SECURITY] [DSA 2418-1] postgresql-8.4 security update
2012-02-27 17:43:53
redhat
redhat
(RHSA-2012:0678) Moderate: postgresql and postgresql84 security update
2012-05-21 00:00:00
centos
centos
postgresql, postgresql84 security update
2012-05-21 16:41:51
fedora
fedora
[SECURITY] Fedora 16 Update: postgresql-9.1.3-1.fc16
2012-03-08 04:54:15
[SECURITY] Fedora 17 Update: postgresql-9.1.3-1.fc17
2012-03-06 20:40:53
[SECURITY] Fedora 16 Update: postgresql-9.1.3-1.fc16
2012-03-08 04:01:20
amazon
amazon
Medium: postgresql8
2012-05-23 10:08:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2012-02-28 00:00:00
seebug
seebug
PostgreSQL 8.x/9.x ććšć€äžȘćźć
šæŒæŽ
2012-02-29 00:00:00
osv
osv
postgresql-8.4 - several
2012-02-27 00:00:00
freebsd
freebsd
databases/postgresql*-client -- multiple vulnerabilities
2012-02-27 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2012-09-28 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
73.1%
Related for POSTGRESQL:CVE-2012-0867