Lucene search
RootSSV:60335HistoryAug 21, 2012 - 12:00 a.m.
PostgreSQL 'xml_parse()'任意文件访问漏洞
2012-08-2100:00:00
Root
www.seebug.org
95
0.003 Low
EPSS
Percentile
63.0%
Bugtraq ID:55074
CVE ID: CVE-2012-3489
PostgreSQL是一款对象关系型数据库管理系统，支持扩展的SQL标准子集。
PostgreSQL解析XML文档中的DTD数据时"xml_parse()"函数存在错误，可被利用读取任意文件。
0
PostgreSQL 8.x
PostgreSQL 9.x
厂商解决方案
PostgreSQL 9.1.5, 9.0.9, 8.4.13或8.3.20已经修复此漏洞，建议用户下载使用：
http://www.postgresql.org
Related
prion
prion
Xxe
2012-10-03 21:55:00
ubuntucve
ubuntucve
CVE-2012-3489
2012-08-17 00:00:00
cve
cve
CVE-2012-3489
2012-10-03 21:55:00
postgresql
postgresql
Vulnerability in core server (CVE-2012-3489)
2012-10-03 21:55:00
veracode
veracode
Information Disclosure
2019-05-02 04:43:13
openvas
openvas
Ubuntu Update for postgresql-9.1 USN-1542-1
2012-08-21 00:00:00
Mandriva Update for postgresql MDVSA-2012:139 (postgresql)
2012-08-21 00:00:00
Ubuntu: Security Advisory (USN-1542-1)
2012-08-21 00:00:00
nessus
nessus
Fedora 17 : postgresql-9.1.5-1.fc17 (2012-12165)
2012-08-27 00:00:00
CentOS 5 / 6 : postgresql / postgresql84 (CESA-2012:1263)
2012-09-14 00:00:00
centos
centos
postgresql, postgresql84 security update
2012-09-13 17:57:44
amazon
amazon
Medium: postgresql8
2012-09-22 21:38:00
debian
debian
[SECURITY] [DSA 2534-1] postgresql-8.4 security update
2012-08-25 16:24:42
osv
osv
postgresql-8.4 - several
2012-08-25 00:00:00
securityvulns
securityvulns
PostgreSQL privilege escalation
2012-08-27 00:00:00
[USN-1542-1] PostgreSQL vulnerabilities
2012-08-27 00:00:00
Apple Mac OS X multiple security vulnerabilities
2013-03-24 00:00:00
redhat
redhat
(RHSA-2012:1263) Moderate: postgresql and postgresql84 security update
2012-09-13 00:00:00
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2012-09-13 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2012-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: postgresql-9.1.5-1.fc17
2012-08-26 00:26:12
[SECURITY] Fedora 17 Update: postgresql-9.1.8-1.fc17
2013-02-17 03:30:04
[SECURITY] Fedora 16 Update: postgresql-9.1.5-1.fc16
2012-08-26 00:21:52
freebsd
freebsd
databases/postgresql*-server -- multiple vulnerabilities
2012-08-17 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2012-09-28 00:00:00