Lucene search

K
ubuntuUbuntuUSN-876-1
HistoryJan 03, 2010 - 12:00 a.m.

PostgreSQL vulnerabilities

2010-01-0300:00:00
ubuntu.com
35

5.8 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

Releases

  • Ubuntu 9.10
  • Ubuntu 9.04
  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 6.06

Packages

  • postgresql-8.1 -
  • postgresql-8.3 -
  • postgresql-8.4 -

Details

It was discovered that PostgreSQL did not properly handle certificates with
NULL characters in the Common Name field of X.509 certificates. An attacker
could exploit this to perform a machine-in-the-middle attack to view sensitive
information or alter encrypted communications. (CVE-2009-4034)

It was discovered that PostgreSQL did not properly manage session-local
state. A remote authenticated user could exploit this to escalate
priviliges within PostgreSQL. (CVE-2009-4136)

Rows per page:
1-10 of 661

5.8 Medium

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%