EUVD-2020-12616

Malware in sbrugna...

EUVD-2017-11857

Malware in sbrugna...

EUVD-2020-12679

Malware in sbrugna...

EUVD-2020-12637

Malware in sbrugna...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

CVE-2020-1853

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage...

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

GaussDB Kernel: Ensuring the Existence of the Socket File

Some application programs may search for the socket file in the /tmp directory to deceive the server. During the system startup, the socket file /tmp/ $ USER mppdb/.s.PGSQL. $PGPORT is created by default to prevent some applications from creating or overwriting the socket file in the /tmp...

GaussDB Kernel: Revoking the CREATE Permission from a User with the PUBLIC Role

A common user can create malicious functions with the same names as system functions if the user has the PUBLIC role. In this way, other users can call these malicious functions by mistake to compromise database security. If the PUBLIC role has the CREATE permission, any user having this role can...

GaussDB Kernel: Configuring the Port

To prevent unauthorized connections to the database and illegal operations on data, you need to change the default port number in time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GaussDB Kernel: Configuring the Maximum Capacity of an Audit Log File

The parameter auditrotationsize specifies the maximum capacity of an audit log file. When the size of an audit log file reaches the specified value, another audit log file is automatically created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a reference...

GaussDB Kernel: Enabling the Auditing of Database Login and Logout

The parameter auditloginlogout specifies whether to audit user login and logout. After this parameter is set to on, users logged in to the database and the time when they logged out are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Disabling the Permission to Copy Files on the Server

The enablecopyserverfiles parameter allows users with the sysadmin permission to copy files on the server. However, sensitive files may be viewed or modified by unauthorized users during remote copy operations. Therefore, disable this configuration for databases in the production environment. The...

GaussDB Kernel: Restricting the Permission for the ${GAUSSHOME}/share Directory

The $GAUSSHOME /share directory stores the shared components of GaussDB Kernel. To prevent them from being tampered or damaged, the directory must be protected and deny unauthorized user access. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Configuring the Number of Days Before Which a Password Cannot Be Reused

You are advised to configure the number of days before which a password cannot be reused. This protects a password from being cracked due to repeated usage. After the parameter passwordreusetime is set, a password can be reused only after the number of days specified by the parameter. Copyright C...

GaussDB Kernel: Using the Private User Solution

If the control permissions of system administrators for tables need to be isolated from their access permissions, that is, administrators can only perform control operations DROP, ALTER, and TRUNCATE on data and cannot perform access operations INSERT, DELETE, UPDATE, SELECT, and COPY, the privat...

GaussDB Kernel: Configuring the Minimum Audit Log File Retention Period

The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

GaussDB Kernel: PUBLIC Role Should Not Have Permissions on All Objects

All users are attached to the PUBLIC role. Therefore, this role should have the fewest permissions for database security purposes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GaussDB Kernel: Enabling the Auditing of Permission Granting and Revoking

The parameter auditgrantrevoke specifies whether to audit the permissions granted to and revoked from database users. After this parameter is set to on, database account permissions are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Configuring the Permission to Access UNIX Domain Sockets

unixsocketpermissions specifies the permission to access UNIX domain sockets. The default value of this parameter is 0777, indicating that all users can access UNIX domain sockets. You are advised to set this parameter to 0770 indicating that only users and groups can access UNIX domain sockets o...