Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2012-3488HistoryOct 03, 2012 - 9:55 p.m.
Vulnerability in contrib module (CVE-2012-3488)
2012-10-0321:55:00
PostgreSQL Global Development Group
www.postgresql.org
551
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.1%
contrib/xml2βs xslt_process() can be used to read and write arbitrary files
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 8.3.20 | |
| postgresql | lt | 9.1.5 | |
| postgresql | lt | 8.4.13 | |
| postgresql | lt | 9.0.9 |
References
Related
nessus
nessus
Oracle Linux 5 : postgresql (ELSA-2012-1264)
2013-07-12 00:00:00
Amazon Linux AMI : postgresql9 (ALAS-2012-121)
2013-09-04 00:00:00
seebug
seebug
PostgreSQL 'xslt_process()'δ»»ζζδ»Άεε»Ίζθ¦ηζΌζ΄
2012-08-21 00:00:00
openvas
openvas
CentOS Update for postgresql CESA-2012:1264 centos5
2012-09-17 00:00:00
RedHat Update for postgresql RHSA-2012:1264-01
2012-09-17 00:00:00
CentOS Update for postgresql CESA-2012:1264 centos5
2012-09-17 00:00:00
prion
prion
Xxe
2012-10-03 21:55:00
redhat
redhat
(RHSA-2012:1264) Moderate: postgresql security update
2012-09-13 00:00:00
(RHSA-2012:1263) Moderate: postgresql and postgresql84 security update
2012-09-13 00:00:00
veracode
veracode
XML External Entity (XXE)
2019-01-15 08:57:18
Information Disclosure
2019-05-02 04:43:13
centos
centos
postgresql security update
2012-09-13 17:55:48
postgresql, postgresql84 security update
2012-09-13 17:57:44
oraclelinux
oraclelinux
postgresql security update
2012-09-13 00:00:00
postgresql and postgresql84 security update
2012-09-13 00:00:00
cve
cve
CVE-2012-3488
2012-10-03 21:55:00
ubuntucve
ubuntucve
CVE-2012-3488
2012-08-17 00:00:00
amazon
amazon
Medium: postgresql9
2012-09-04 10:23:00
Medium: postgresql8
2012-09-22 21:38:00
osv
osv
postgresql-8.4 - several
2012-08-25 00:00:00
securityvulns
securityvulns
PostgreSQL privilege escalation
2012-08-27 00:00:00
[USN-1542-1] PostgreSQL vulnerabilities
2012-08-27 00:00:00
Apple Mac OS X multiple security vulnerabilities
2013-03-24 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2012-08-21 00:00:00
debian
debian
[SECURITY] [DSA 2534-1] postgresql-8.4 security update
2012-08-25 16:24:42
fedora
fedora
[SECURITY] Fedora 17 Update: postgresql-9.1.5-1.fc17
2012-08-26 00:26:12
[SECURITY] Fedora 17 Update: postgresql-9.1.8-1.fc17
2013-02-17 03:30:04
[SECURITY] Fedora 16 Update: postgresql-9.1.5-1.fc16
2012-08-26 00:21:52
freebsd
freebsd
databases/postgresql*-server -- multiple vulnerabilities
2012-08-17 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2012-09-28 00:00:00
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.1%
Related for POSTGRESQL:CVE-2012-3488