EUVD-2017-11857

Malware in sbrugna...

EUVD-2020-12616

Malware in sbrugna...

EUVD-2020-12679

Malware in sbrugna...

EUVD-2020-12637

Malware in sbrugna...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

CVE-2020-1853

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage...

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands...

GaussDB Kernel: Prohibiting New Connections to Database Templates

To prevent improper modification of the database template, you need to set the datallowconn field in the system catalog pgdatabase to false, prohibiting new connections to the database. If the database template template1 is set to deny user connections, database upgrade will be affected. If...

GaussDB Kernel: Prohibiting host Entries from Using MD5 Authentication in the pg_hba.conf File

MD5 authentication is insecure. You are advised to use SHA256 authentication. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

GaussDB Kernel: Disabling the Logging of the Host Name

By default, the connection log message displays only the IP address of the connected host. If loghostname is set to on, the host name is also recorded. It may take some time to parse the host name and affect database performance. Copyright C 2020 Greenbone Networks GmbH Some text descriptions mig...

GaussDB Kernel: Setting Source IP Address for host Entries in the pg_hba.conf File

If source IP address is set to all or 0.0.0.0/0 for host entries, any IP addresses can access the database. You are advised to set source IP address for host entries to the IP address that needs to connect to the database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

GaussDB Kernel: Configuring the Backslash Quote Usage

backslashquote specifies whether a single quotation mark Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

GaussDB Kernel: Deleting hostnossl Entries from the pg_hba.conf File

The connections specified by the hostnossl entries are not encrypted using SSL. Considering security, you are advised to use the SSL connection. SSL can be used for connections between the CN and external nodes but not for connections between internal nodes. Copyright C 2020 Greenbone Networks Gm...

GaussDB Kernel: Controlling the Permission to Execute the SECURITY INVOKER Function

The SECURITY INVOKER function is executed with the permissions of the invoker. Before invoking a function not created by yourself, check the function content to prevent the function creator from performing unauthorized operations with your Permissions. Copyright C 2020 Greenbone Networks GmbH Som...

GaussDB Kernel: PUBLIC Role Should Not Have Permissions on All Objects

All users are attached to the PUBLIC role. Therefore, this role should have the fewest permissions for database security purposes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GaussDB Kernel: Configuring the Password Encryption Mode

GaussDB Kernel supports two password encryption modes: MD5 and SHA256. MD5 is an insecure encryption mode and should not be configured. This mode is reserved only for compatibility with open-source third-party tools. SHA256 default configuration should be used. Copyright C 2020 Greenbone Networks...

GaussDB Kernel: PUBLIC Role Should Not Have Any Permissions on the pg_catalog.pg_authid Table

The pgcatalog.pgauthid table contains all system roles. To protect them from being arbitrarily changed, the PUBLIC role is not allowed to have any permissions on this table. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

GaussDB Kernel: Configuring the Validity Period of User Roles

During role creation, the keyword VALID BEGIN is used to set the role validity start time and VALID UNTIL to set the end time. If these two keywords are not set, roles are permanently valid. The role expiration time on each node in the GaussDB Kernel cluster depends on the OS clock on each node...

GaussDB Kernel: Configuring the WAL Information Recording Level

The parameter wallevel specifies the level of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

GaussDB Kernel: Enabling the Logging of User Login

The parameter logconnections specifies whether to record each connection attempt and the successful client connection authentication in server logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...