Lucene search
UbuntuUSN-1461-1HistoryJun 05, 2012 - 12:00 a.m.
PostgreSQL vulnerabilities
2012-06-0500:00:00
ubuntu.com
36
7.1 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.0%
Releases
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.04
- Ubuntu 8.04
Packages
- postgresql-8.3 - Object-relational SQL database
- postgresql-8.4 - Object-relational SQL database
- postgresql-9.1 - Object-relational SQL database
Details
It was discovered that PostgreSQL incorrectly handled certain bytes passed
to the crypt() function when using DES encryption. An attacker could use
this flaw to incorrectly handle authentication. (CVE-2012-2143)
It was discovered that PostgreSQL incorrectly handled SECURITY DEFINER and
SET attributes on procedural call handlers. An attacker could use this flaw
to cause PostgreSQL to crash, leading to a denial of service.
(CVE-2012-2655)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | postgresql-8.3 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libecpg-compat3 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libecpg-dev | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libecpg6 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpgtypes3 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpq-dev | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpq5 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | postgresql-client-8.3 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | postgresql-contrib-8.3 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
| Ubuntu | 8.04 | noarch | postgresql-plperl-8.3 | <Β 8.3.19-0ubuntu8.04 | UNKNOWN |
Related
securityvulns
securityvulns
[SECURITY] [DSA 2491-1] postgresql-8.4 security update
2012-06-13 00:00:00
PostgreSQL security vulnerabilities
2012-06-13 00:00:00
FreeBSD crypt() implementation vulnerability
2012-05-31 00:00:00
openvas
openvas
Debian Security Advisory DSA 2491-1 (postgresql-8.4)
2012-08-10 00:00:00
Debian: Security Advisory (DSA-2491-1)
2012-08-10 00:00:00
CentOS Update for postgresql84 CESA-2012:1037 centos5
2012-07-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:42:10
Authentication Bypass
2019-01-15 08:53:32
Denial Of Service (DoS)
2019-05-02 04:42:13
redhat
redhat
(RHSA-2012:1037) Moderate: postgresql and postgresql84 security update
2012-06-25 00:00:00
(RHSA-2012:1036) Moderate: postgresql security update
2012-06-25 00:00:00
(RHSA-2012:1047) Moderate: php53 security update
2012-06-27 00:00:00
nessus
nessus
Scientific Linux Security Update : postgresql and postgresql84 on SL5.x i386/x86_64 (20120625)
2012-08-01 00:00:00
Fedora 17 : postgresql-9.1.4-1.fc17 (2012-8924)
2012-06-18 00:00:00
Oracle Linux 5 / 6 : postgresql / postgresql84 (ELSA-2012-1037)
2013-07-12 00:00:00
osv
osv
postgresql-8.4 - several
2012-06-09 00:00:00
debian
debian
[SECURITY] [DSA 2491-1] postgresql-8.4 security update
2012-06-09 11:57:54
fedora
fedora
[SECURITY] Fedora 17 Update: postgresql-9.1.4-1.fc17
2012-06-15 12:27:43
[SECURITY] Fedora 17 Update: postgresql-9.1.5-1.fc17
2012-08-26 00:26:12
[SECURITY] Fedora 17 Update: postgresql-9.1.8-1.fc17
2013-02-17 03:30:04
centos
centos
postgresql, postgresql84 security update
2012-06-25 22:38:39
postgresql security update
2012-06-25 22:25:31
php53 security update
2012-06-27 20:24:26
amazon
amazon
Medium: postgresql8
2012-07-05 16:08:00
Medium: postgresql9
2012-06-19 16:02:00
Medium: php
2012-07-05 16:09:00
cve
cve
CVE-2012-2655
2012-07-18 23:55:00
CVE-2012-2143
2012-07-05 14:55:00
ubuntucve
ubuntucve
CVE-2012-2655
2012-06-05 00:00:00
CVE-2012-2143
2012-06-05 00:00:00
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2012-06-25 00:00:00
postgresql security update
2012-06-25 00:00:00
php53 security update
2012-06-27 00:00:00
prion
prion
Code injection
2012-07-18 23:55:00
Default credentials
2012-07-05 14:55:00
postgresql
postgresql
Vulnerability in core server (CVE-2012-2655)
2012-07-18 23:55:00
Vulnerability in contrib module (CVE-2012-2143)
2012-07-05 14:55:00
seebug
seebug
PostgreSQL 'SECURITY DEFINER'ε'SET'ε±ζ§θΏη¨ζη»ζε‘ζΌζ΄
2012-06-06 00:00:00
freebsd
freebsd
databases/postgresql*-server -- crypt vulnerabilities
2012-05-30 00:00:00
FreeBSD -- Incorrect crypt() hashing
2012-05-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:02.crypt
2012-05-30 00:00:00
checkpoint_security
checkpoint_security
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2012-09-28 00:00:00
PHP: Multiple vulnerabilities
2012-09-24 00:00:00
suse
suse
Security update for PHP5 (important)
2012-07-05 03:08:30
f5
f5
K15903 : Multiple PHP vulnerabilities
2014-12-11 00:00:00
SOL15903 - Multiple PHP vulnerabilities
2014-12-11 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2012-06-19 00:00:00
7.1 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.0%
Related for USN-1461-1