SuSE Update for postgresql openSUSE-SU-2013:0635-1 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test $Id: gbsuse201306351.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for postgresql openSUSE-SU-2013:0635-1 postgresql Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net Th...

openSUSE: Security Advisory for postgresql (openSUSE-SU-2013:0635-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for postgresql91 (openSUSE-SU-2013:0627-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PostgreSQL Database Name Command Line Flag Injection (CVE-2013-1899)

A command-line flag injection vulnerability has been reported in the PostgreSQL database server...

Ubuntu Update for linux USN-1899-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN18991.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for linux USN-1899-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu: Security Advisory (USN-1899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : postgresql-9.2.4-1.fc19 (2013-6148)

Update to PostgreSQL 9.2.4, for various fixes described at http://www.postgresql.org/docs/9.2/static/release-9-2-4. html including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901 - fix build for aarch64 and ppc64p7 Note that Tenable Network Security has extracted the preceding...

PostgreSQL Denial of Service Vulnerability (Apr 2013) - Windows

PostgreSQL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PostgreSQL 拒绝服务和代码执行漏洞(CVE-2013-1899)

BUGTRAQ ID: 58876 CVECAN ID: CVE-2013-1899 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL 9.2.4, 9.1.9, 9.0.13之前版本存在参数注入漏洞，远程攻击者通过构造以"-"（连字符）开头的数据库名称的连接请求，可以修改配置设置、执行任意代码或者造成拒绝服务。 攻击者造成拒绝服务场景要求攻击者能访问到PostgreSQL开放端口，无需认证。 攻击者能够执行任意代码的场景要求1攻击者经过认证;2 PostgreSQL服务器的名称和用户名一致。 0 Debian Linux 6.0...

Fedora Update for postgresql FEDORA-2013-5000

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : postgresql-9.2.4-1.fc18 (2013-4951)

Update to PostgreSQL 9.2.4, for various fixes described at http://www.postgresql.org/docs/9.2/static/release-9-2-4. html including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901 - fix build for aarch64 and ppc64p7 Note that Tenable Network Security has extracted the preceding...

SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7585)

This update to version 9.1.9 fixes : - Fix insecure parsing of server command-line switches. CVE-2013-1899 - Reset OpenSSL randomness state in each postmaster child process. CVE-2013-1900 - Make REPLICATION privilege checks test current user not authenticated user. CVE-2013-1901 %NASLMINLEVEL 703...

Fedora 17 : postgresql-9.1.9-1.fc17 (2013-5000)

Update to PostgreSQL 9.1.9, for various fixes described at http://www.postgresql.org/docs/9.1/static/release-9-1-9. html including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

postgresql92: Various security fixes. Update to 9.2.4. (important)

postgresql was updated to version 9.2.4 bnc812525: CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is...

postgresql91 to version 9.1.9. (important)

postgresql was updated to version 9.1.9 bnc812525: CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is...

PostgreSQL < 9.0.13 Multiple Vulnerabilities

Binary data 6745.prm...

Ubuntu Update for postgresql-9.1 USN-1789-1

Check for the Version of postgresql-9.1 OpenVAS Vulnerability Test $Id: gbubuntuUSN17891.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for postgresql-9.1 USN-1789-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Ubuntu: Security Advisory (USN-1789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1899

CVE-2013-1899 affects PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13. The vulnerability allows remote attackers to cause file corruption (DoS) and, for remote authenticated users, to modify configuration settings and potentially execute arbitrary code via a connection ...

PostgreSQL Database Name Command Line Flag Injection

This module can identify PostgreSQL 9.0, 9.1, and 9.2 servers that are vulnerable to command-line flag injection through CVE-2013-1899. This can lead to denial of service, privilege escalation, or even arbitrary code execution. This module requires Metasploit: https://metasploit.com/download...