DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2013-04-04
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsfunktionen zu umgehen, um seine Privilegien zu erweitern oder um Daten zu manipulieren oder offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-1903US | high10.0 | — | ||
PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to script… | ||||
| CVE-2013-1902US | high10.0OT elevated | — | ||
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames,… | ||||
| CVE-2013-1901US | medium4.0 | — | ||
PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions… | ||||
| CVE-2013-1900US | high8.5 | — | ||
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remo… | ||||
| CVE-2013-1899US | medium6.5 | Exploit | ||
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption… | ||||
02
references
External citations — patches, advisories, analysis.
- Blogeintrag "Dissecting PostgreSQL CVE-2013-1899" vom 2013-04-10external
- Debian Security Advisory DSA-2657-1 vom 2013-04-04external
- Debian Security Advisory DSA-2658-1 vom 2013-04-04external
- PostgreSQL 9.2.4, 9.1.9, 9.0.13 und 8.4.17 veröffentlicht vom 2013-04-04external
- Ubuntu Security Notice USN-1789-1 vom 2013-04-04external
- Oracle Linux Security Advisory ELSA-2024-10882 vom 2024-12-24external
- WID-SEC-W-2024-3750 - CSAF Versionself
- WID-SEC-2024-3750 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan