Test ID:	1.3.6.1.4.1.25623.1.0.831559
Category:	Mandrake Local Security Checks
Title:	Mandriva Update for postgresql8.3 MDVSA-2012:027 (postgresql8.3)
Summary:	The remote host is missing an update for the 'postgresql8.3'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'postgresql8.3' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities has been discovered and corrected in postgresql: Permissions on a function called by a trigger are not properly checked (CVE-2012-0866). Line breaks in object names can be exploited to execute arbitrary SQL when reloading a pg_dump file (CVE-2012-0868). This advisory provides the latest version of PostgreSQL that is not vulnerable to these issues. Affected Software/OS: postgresql8.3 on Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0866 49272 http://secunia.com/advisories/49272 49273 http://secunia.com/advisories/49273 DSA-2418 http://www.debian.org/security/2012/dsa-2418 MDVSA-2012:026 http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 MDVSA-2012:027 http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 MDVSA-2012:092 http://www.mandriva.com/security/advisories?name=MDVSA-2012:092 RHSA-2012:0677 http://rhn.redhat.com/errata/RHSA-2012-0677.html RHSA-2012:0678 http://rhn.redhat.com/errata/RHSA-2012-0678.html http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://www.postgresql.org/about/news/1377/ http://www.postgresql.org/docs/8.3/static/release-8-3-18.html http://www.postgresql.org/docs/8.4/static/release-8-4-11.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html http://www.postgresql.org/docs/9.1/static/release-9-1-3.html openSUSE-SU-2012:1173 http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html Common Vulnerability Exposure (CVE) ID: CVE-2012-0868
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.