CVE-2001-1379

CVE-2001-1379 affects the PostgreSQL authentication modules used with Apache: mod_auth_pgsql 0.9.5 and mod_auth_pgsql_sys 0.9.4 . The vulnerability is a SQL injection via the user name parameter that allows remote attackers to bypass authentication and execute arbitrary SQL. OpenVAS/Nessus entrie...

CVE-2000-1199

CVE-2000-1199 affects PostgreSQL: usernames and passwords are stored in plaintext in (1) pg_shadow and (2) pg_pwd, enabling attackers with sufficient privileges to access databases. This root cause is plaintext credential storage; impact is described as partial confidentiality, partial integrity,...

CVE-2001-1379

The PostgreSQL authentication modules 1 modauthpgsql 0.9.5, and 2 modauthpgsqlsys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name...

CVE-2001-0201

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...

CVE-2001-0201

The CVE-2001-0201 entry describes a vulnerability in the Postaci frontend for PostgreSQL where improper filtering of characters (e.g., semicolons) could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program. This yields partial confidentiality, integrity, and a...

PostgreSQL 6.3.26.5.3 - Cleartext Passwords

PostgreSQL 6.3.26.5.3 - Cleartext Passwords source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgr...

CVE-1999-0862

The CVE-1999-0862 case relates to insecure directory permissions in the PostgreSQL RPM distribution, enabling local users to gain privileges by reading a plaintext password file. The PT-Security entry notes PostgreSQL (affected versions not specified) and identifies the root cause as insecure RPM...

CVE-1999-0862

Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file...

ROS-2-1458

2.1458 Multiple vulnerabilities in PostgreSQL CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 1. Vulnerability Description: CVE-2021-32027 The vulnerability allows a remote attacker to execute arbitrary code on the target system. CVE-2021-32028, CVE-2021-32029 Vulnerability allows a remote user to...