113 matches found
postgresql and postgresql84 security update
8.4.13-1 - Update to PostgreSQL 8.4.13, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-13.html including the fixes for CVE-2012-3488, CVE-2012-3489 Resolves: 852020...
Mandriva Linux Security Advisory : postgresql (MDVSA-2012:139)
Multiple vulnerabilities has been discovered and corrected in postgresql : Prevent access to external files/URLs via contrib/xml2's xsltprocess Peter Eisentraut. libxslt offers the ability to read and write both files and URLs through stylesheet commands, thus allowing unprivileged database users...
FreeBSD Ports: postgresql-server
The remote host is missing an update to the system as announced in the referenced advisory. VID 07234e78-e899-11e1-b38d-0023ae8e59f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 07234e78-e899-11e1-b38d-0023ae8e59f0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: postgresql-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora Update for postgresql FEDORA-2012-12156
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for postgresql FEDORA-2012-12165
Check for the Version of postgresql OpenVAS Vulnerability Test Fedora Update for postgresql FEDORA-2012-12165 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[USN-1542-1] PostgreSQL vulnerabilities
========================================================================== Ubuntu Security Notice USN-1542-1 August 21, 2012 postgresql-8.3, postgresql-8.4, postgresql-9.1 vulnerabilities ========================================================================== A security issue affects these...
Debian DSA-2534-1 : postgresql-8.4 - several vulnerabilities
Two vulnerabilities related to XML processing were discovered in PostgreSQL, a SQL database. - CVE-2012-3488 contrib/xml2's xsltprocess can be used to read and write external files and URLs. - CVE-2012-3489 xmlparse fetches external files or URLs to resolve DTD and entity references in XML values...
Fedora 17 : postgresql-9.1.5-1.fc17 (2012-12165)
Update to PostgreSQL 9.1.5, for various fixes described at http://www.postgresql.org/docs/9.1/static/release-9-1-5.html including the fixes for CVE-2012-3488, CVE-2012-3489 Configure postmaster to create Unix-domain sockets in both /var/run/postgresql and /tmp; the former is now the default place...
[SECURITY] [DSA 2534-1] postgresql-8.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2534-1 [email protected] http://www.debian.org/security/ Florian Weimer August 25, 2012 http://www.debian.org/security/faq -...
USN-1542-1: PostgreSQL vulnerabilities
Peter Eisentraut discovered that the XSLT functionality in the optional XML2 extension would allow unprivileged database users to both read and write data with the privileges of the database server. CVE-2012-3488 Noah Misch and Tom Lane discovered that the XML functionality in the optional XML2...
Mandriva Update for postgresql MDVSA-2012:139 (postgresql)
Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDVSA-2012:139 postgresql Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Ubuntu Update for postgresql-9.1 USN-1542-1
Ubuntu Update for Linux kernel vulnerabilities USN-1542-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15421.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for postgresql-9.1 USN-1542-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : postgresql-8.3, postgresql-8.4, postgresql-9.1 vulnerabilities (USN-1542-1)
Peter Eisentraut discovered that the XSLT functionality in the optional XML2 extension would allow unprivileged database users to both read and write data with the privileges of the database server. CVE-2012-3488 Noah Misch and Tom Lane discovered that the XML functionality in the optional XML2...
Mandriva Update for postgresql MDVSA-2012:139 (postgresql)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu: Security Advisory (USN-1542-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-3489
CVE-2011-3489 affects Rockwell RSLogix/FactoryTalk components. Affects: RnaUtility.dll in RsvcHost.exe (RSLogix 19 and earlier). Vulnerable in the RNAn packet handling on TCP port 4446 due to improper handling of a 32-bit size field, enabling a remote attacker to cause a denial-of-service (crash)...
Rockwell RSLogix Overflow Vulnerability
Overview This updated advisory is a follow-up to the Alert titled “ICS-ALERT-11-256-05A—Rockwell RSLogix Overflow Vulnerability” that was published September 13, 2011, on the Industrial Control Systems Cyber Emergency Response Team ICS-CERT web page. ICS-CERT is aware of a public report of an...
CVE-2010-3489
Cross-site scripting XSS vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom formerly Netautor Professional 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter...
CVE-2010-3489
CVE-2010-3489 is a documented XSS vulnerability in Netautor Professional/Digital Workroom. The affected component is login2.php (goback parameter) in Netautor Professional 5.5.0; input passed to goback is not properly sanitized, enabling arbitrary HTML/script execution in a user’s browser. Multip...