GaussDB: Read Access Permissions for GSDB_HOME (KB)

The home directory is a database installation directory specified by the environment variable GSDBHOME. Access permissions to files and directories within GSDBHOME need to be set carefully. Note: This script only stores information for other Policy Controls. This script can be performed only by a...

GaussDB: Read Access Permissions for GSDB_DATA (KB)

The data directory stores user data files. Access permissions to files and directories within GSDBDATA need to be set carefully. Note: This script only stores information for other Policy Controls. This script can be performed only by a database installation user. SPDX-FileCopyrightText: 2020...

GaussDB: Access permissions to ${GSDB_HOME}/add-ons

The GSDBHOME/lib and GSDBHOME/add-ons directories store GaussDB 100 shared components. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

GaussDB: Access permissions to ${GSDB_HOME}/bin

The GSDBHOME/bin directory stores binary files of the database. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free...

GaussDB: Access permissions to ${GSDB_DATA}/cfg/zengine.ini

The zengine.ini file stores database connection configuration. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free...

GaussDB: Access permissions to ${GSDB_DATA}/data

The data directory stores user data files. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...

GaussDB: Access permissions to ${GSDB_HOME}/cacert.pem

If SSL is used, you need to configure the SSL certificate on the database server and set the certificate permission. You are advised to set the permission for the private key file to owner-readable-only. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This progr...

GaussDB: Access permissions to ${GSDB_HOME}

The home directory is a database installation directory specified by the environment variable GSDBHOME. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General...

GaussDB: Access permissions to ${GSDB_HOME}/lib

The GSDBHOME/lib and GSDBHOME/add-ons directories store GaussDB 100 shared components. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

Huawei GaussDB 200 OLAP 6.5.1 Multiple Vulnerabilities

Huawei GaussDB 200 is affected by multiple command injection and path traversal vulnerabilities. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

Command injection

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

CVE-2020-1790

The CVE-2020-1790 entry concerns Huawei GaussDB 200 OLAP (version 6.5.1). The root cause is command construction that incorporates external user input without sufficient validation, enabling possible command injection. Documented impact is execution of arbitrary commands on the affected system. E...

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

Command injection

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

Huawei GaussDB 200 Command Injection Vulnerability (CNVD-2020-13694)

Huawei GaussDB 200 is a distributed parallel relational database system developed by Huawei China based on the open source database Postgres-XC. A command injection vulnerability exists in GaussDB 200 version 6.5.1. An attacker can exploit this vulnerability to execute system commands...

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

CVE-2020-1811

Summary: CVE-2020-1811 affects Huawei GaussDB 200 OLAP, version 6.5.1, where a vulnerability arises from insufficient input validation leading to a command-injection risk. The condition allows remote attackers with low privileges to send crafted commands to the affected GaussDB 200 device and pot...