Test Kennung:	1.3.6.1.4.1.25623.1.0.841727
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for postgresql-9.1 USN-2120-1
Zusammenfassung:	The remote host is missing an update for the 'postgresql-9.1'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'postgresql-9.1' package(s) announced via the referenced advisory. Vulnerability Insight: Noah Misch and Jonas Sundman discovered that PostgreSQL did not correctly enforce ADMIN OPTION restrictions. An authenticated attacker could use this issue to possibly revoke access from others, contrary to expected permissions. (CVE-2014-0060) Andres Freund discovered that PostgreSQL incorrectly handled validator functions. An authenticated attacker could possibly use this issue to escalate their privileges. (CVE-2014-0061) Andres Freund discovered that PostgreSQL incorrectly handled concurrent CREATE INDEX statements. An authenticated attacker could possibly use this issue to obtain access to restricted data, bypassing intended privileges. (CVE-2014-0062) Daniel Schü ssler discovered that PostgreSQL incorrectly handled datetime input. An authenticated attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-0063) It was discovered that PostgreSQL incorrectly handled certain size calculations. An authenticated attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-0064) Peter Eisentraut and Jozef Mlich discovered that PostgreSQL incorrectly handled certain buffer sizes. An authenticated attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-0065) Honza Horak discovered that PostgreSQL incorrectly used the crypt() library function. This issue could possibly cause PostgreSQL to crash, resulting in a denial of service (CVE-2014-0066) Affected Software/OS: postgresql-9.1 on Ubuntu 13.10, Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 10.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0060 http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html Debian Security Information: DSA-2864 (Google Search) http://www.debian.org/security/2014/dsa-2864 Debian Security Information: DSA-2865 (Google Search) http://www.debian.org/security/2014/dsa-2865 RedHat Security Advisories: RHSA-2014:0211 http://rhn.redhat.com/errata/RHSA-2014-0211.html RedHat Security Advisories: RHSA-2014:0221 http://rhn.redhat.com/errata/RHSA-2014-0221.html RedHat Security Advisories: RHSA-2014:0249 http://rhn.redhat.com/errata/RHSA-2014-0249.html RedHat Security Advisories: RHSA-2014:0469 http://rhn.redhat.com/errata/RHSA-2014-0469.html http://secunia.com/advisories/61307 SuSE Security Announcement: openSUSE-SU-2014:0345 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html SuSE Security Announcement: openSUSE-SU-2014:0368 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html http://www.ubuntu.com/usn/USN-2120-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-0061 Common Vulnerability Exposure (CVE) ID: CVE-2014-0062 BugTraq ID: 65727 http://www.securityfocus.com/bid/65727 Common Vulnerability Exposure (CVE) ID: CVE-2014-0063 BugTraq ID: 65719 http://www.securityfocus.com/bid/65719 Common Vulnerability Exposure (CVE) ID: CVE-2014-0064 BugTraq ID: 65725 http://www.securityfocus.com/bid/65725 Common Vulnerability Exposure (CVE) ID: CVE-2014-0065 BugTraq ID: 65731 http://www.securityfocus.com/bid/65731 Common Vulnerability Exposure (CVE) ID: CVE-2014-0066
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.