Lucene search

K
postgresqlPostgreSQL Global Development GroupPOSTGRESQL:CVE-2012-0868
HistoryJul 18, 2012 - 11:55 p.m.

Vulnerability in core server (CVE-2012-0868)

2012-07-1823:55:00
PostgreSQL Global Development Group
www.postgresql.org
578

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

81.3%

Line breaks in object names can be exploited to execute arbitrary SQL when reloading a pg_dump file.

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

81.3%