Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.72014
Categoría:Mandrake Local Security Checks
Título:Mandriva Security Advisory MDVSA-2012:026 (postgresql)
Resumen:NOSUMMARY
Descripción:Description:
The remote host is missing an update to postgresql
announced via advisory MDVSA-2012:026.

Multiple vulnerabilities has been discovered and corrected in
postgresql:

Permissions on a function called by a trigger are not properly checked
(CVE-2012-0866).

SSL certificate name checks are truncated to 32 characters, allowing
connection spoofing under some circumstances when using third party
certificate authorities (CVE-2012-0867).

Line breaks in object names can be exploited to execute arbitrary
SQL when reloading a pg_dump file (CVE-2012-0868).

This advisory provides the latest versions of PostgreSQL that is not
vulnerable to these issues.

Affected: 2010.1, 2011.

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2012:026
http://www.postgresql.org/docs/9.0/static/release-9-0-7.html

Risk factor : High

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2012-0866
49272
http://secunia.com/advisories/49272
49273
http://secunia.com/advisories/49273
DSA-2418
http://www.debian.org/security/2012/dsa-2418
MDVSA-2012:026
http://www.mandriva.com/security/advisories?name=MDVSA-2012:026
MDVSA-2012:027
http://www.mandriva.com/security/advisories?name=MDVSA-2012:027
MDVSA-2012:092
http://www.mandriva.com/security/advisories?name=MDVSA-2012:092
RHSA-2012:0677
http://rhn.redhat.com/errata/RHSA-2012-0677.html
RHSA-2012:0678
http://rhn.redhat.com/errata/RHSA-2012-0678.html
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://www.postgresql.org/about/news/1377/
http://www.postgresql.org/docs/8.3/static/release-8-3-18.html
http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
http://www.postgresql.org/docs/9.0/static/release-9-0-7.html
http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
openSUSE-SU-2012:1173
http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
Common Vulnerability Exposure (CVE) ID: CVE-2012-0867
Common Vulnerability Exposure (CVE) ID: CVE-2012-0868
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.