Lucene search
RootSSV:60334HistoryAug 21, 2012 - 12:00 a.m.
PostgreSQL 'xslt_process()'任意文件创建或覆盖漏洞
2012-08-2100:00:00
Root
www.seebug.org
75
0.002 Low
EPSS
Percentile
54.1%
Bugtraq ID:55072
CVE ID: CVE-2012-3488
PostgreSQL是一款对象关系型数据库管理系统，支持扩展的SQL标准子集。
PostgreSQL解析XSLT样式表时"xslt_process()"函数存在错误，允许攻击者利用漏洞创建或覆盖任意文件。
0
PostgreSQL 8.x
PostgreSQL 9.x
厂商解决方案
PostgreSQL 9.1.5, 9.0.9, 8.4.13或8.3.20已经修复此漏洞，建议用户下载使用：
http://www.postgresql.org
Related
nessus
nessus
Oracle Linux 5 : postgresql (ELSA-2012-1264)
2013-07-12 00:00:00
CentOS 5 : postgresql (CESA-2012:1264)
2012-09-14 00:00:00
openvas
openvas
CentOS Update for postgresql CESA-2012:1264 centos5
2012-09-17 00:00:00
CentOS Update for postgresql CESA-2012:1264 centos5
2012-09-17 00:00:00
RedHat Update for postgresql RHSA-2012:1264-01
2012-09-17 00:00:00
centos
centos
postgresql security update
2012-09-13 17:55:48
postgresql, postgresql84 security update
2012-09-13 17:57:44
oraclelinux
oraclelinux
postgresql security update
2012-09-13 00:00:00
postgresql and postgresql84 security update
2012-09-13 00:00:00
redhat
redhat
(RHSA-2012:1264) Moderate: postgresql security update
2012-09-13 00:00:00
(RHSA-2012:1263) Moderate: postgresql and postgresql84 security update
2012-09-13 00:00:00
veracode
veracode
XML External Entity (XXE)
2019-01-15 08:57:18
Information Disclosure
2019-05-02 04:43:13
prion
prion
Xxe
2012-10-03 21:55:00
postgresql
postgresql
Vulnerability in contrib module (CVE-2012-3488)
2012-10-03 21:55:00
cve
cve
CVE-2012-3488
2012-10-03 21:55:00
amazon
amazon
Medium: postgresql9
2012-09-04 10:23:00
Medium: postgresql8
2012-09-22 21:38:00
ubuntucve
ubuntucve
CVE-2012-3488
2012-08-17 00:00:00
osv
osv
postgresql-8.4 - several
2012-08-25 00:00:00
securityvulns
securityvulns
PostgreSQL privilege escalation
2012-08-27 00:00:00
[USN-1542-1] PostgreSQL vulnerabilities
2012-08-27 00:00:00
Apple Mac OS X multiple security vulnerabilities
2013-03-24 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2012-08-21 00:00:00
debian
debian
[SECURITY] [DSA 2534-1] postgresql-8.4 security update
2012-08-25 16:24:42
fedora
fedora
[SECURITY] Fedora 17 Update: postgresql-9.1.5-1.fc17
2012-08-26 00:26:12
[SECURITY] Fedora 17 Update: postgresql-9.1.8-1.fc17
2013-02-17 03:30:04
[SECURITY] Fedora 16 Update: postgresql-9.1.5-1.fc16
2012-08-26 00:21:52
freebsd
freebsd
databases/postgresql*-server -- multiple vulnerabilities
2012-08-17 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2012-09-28 00:00:00