EUVD-2020-12679

Malware in sbrugna...

EUVD-2017-11857

Malware in sbrugna...

EUVD-2020-12616

Malware in sbrugna...

EUVD-2020-12637

Malware in sbrugna...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

CVE-2020-1853

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage...

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

GaussDB Kernel: Changing the Password of the Initial User

An initial user is the system administrator with the ID 10 and has the highest permission in GaussDB Kernel. This user cannot be modified or locked. Change the password of this user after the database is installed. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted...

GaussDB Kernel: Authentication Parameters

Set login parameters for scanning GaussDB Kernel database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

GaussDB Kernel: Resource Labels

You can add a resource label to a group of database resources to control them, improving resource management efficiency. Therefore, you are advised to enable enablesecuritypolicy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

GaussDB Kernel: Configuring Rsyslog for Unified Audit Logs

By default, unified audit logs are output to the Rsyslog on each CN. User root is authorized to configure and view the logs. Ensure that enablesecuritypolicy is Enabled. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...

GaussDB Kernel: Configuring the Validity Period of User Roles

During role creation, the keyword VALID BEGIN is used to set the role validity start time and VALID UNTIL to set the end time. If these two keywords are not set, roles are permanently valid. The role expiration time on each node in the GaussDB Kernel cluster depends on the OS clock on each node...

GaussDB Kernel: Deleting the Default Username

You are advised not to use a well-known username, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

GaussDB Kernel: Revoking the CREATE Permission from a User with the PUBLIC Role

A common user can create malicious functions with the same names as system functions if the user has the PUBLIC role. In this way, other users can call these malicious functions by mistake to compromise database security. If the PUBLIC role has the CREATE permission, any user having this role can...

GaussDB Kernel: Disabling the Permission to Copy Files on the Server

The enablecopyserverfiles parameter allows users with the sysadmin permission to copy files on the server. However, sensitive files may be viewed or modified by unauthorized users during remote copy operations. Therefore, disable this configuration for databases in the production environment. The...

GaussDB Kernel: Enabling the Auditing of Database Login and Logout

The parameter auditloginlogout specifies whether to audit user login and logout. After this parameter is set to on, users logged in to the database and the time when they logged out are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Configuring Log File Permissions

After loggingcollector is set to on, you can set logfilemode to specify server log file permissions. Access to log files must be restricted, because the log files may contain sensitive data. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Disabling System Catalog Structure Modification

allowsystemtablemods allows for system catalog structure modification. This parameter collaborates with GaussDB Kernel to help recover a severely damaged database in some cases. You are advised not to use this parameter in production Databases. Copyright C 2020 Greenbone Networks GmbH Some text...

GaussDB Kernel: Setting user for host Entries in the pg_hba.conf File

If user is set to all for host entries, any users are allowed to access the database. You are advised to set user for host entries to the user who needs to connect to the database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...

GaussDB Kernel: Configuring the SSL Encryption Algorithm

sslciphers specifies the SSL encryption algorithms used for secure connections. GaussDB Kernel supports the following algorithms: - DHE-RSA-AES128-GCM-SHA256 - DHE-RSA-AES256-GCM-SHA384 - DHE-RSA-AES128-CCM - DHE-RSA-AES256-CCM You are advised to set sslciphers to ALL. Then, GaussDB Kernel uses...