Multiple vulnerabilities in PostgreSQL



| Updated: 2020-08-11
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2012-0866
CVE-2012-0868
CWE-ID CWE-264
CWE-89
Exploitation vector Network
Public exploit N/A
Vulnerable software
 PostgreSQL
Server applications / Database software

Vendor PostgreSQL Global Development Group

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU43839

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2012-0866

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote #AU# to read and manipulate data.

CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PostgreSQL: 8.3 - 9.1.2

CPE2.3 External links

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
https://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
https://rhn.redhat.com/errata/RHSA-2012-0677.html
https://rhn.redhat.com/errata/RHSA-2012-0678.html
https://secunia.com/advisories/49272
https://secunia.com/advisories/49273
https://www.debian.org/security/2012/dsa-2418
https://www.mandriva.com/security/advisories?name=MDVSA-2012:026
https://www.mandriva.com/security/advisories?name=MDVSA-2012:027
https://www.mandriva.com/security/advisories?name=MDVSA-2012:092
https://www.postgresql.org/about/news/1377/
https://www.postgresql.org/docs/8.3/static/release-8-3-18.html
https://www.postgresql.org/docs/8.4/static/release-8-4-11.html
https://www.postgresql.org/docs/9.0/static/release-9-0-7.html
https://www.postgresql.org/docs/9.1/static/release-9-1-3.html


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) SQL injection

EUVDB-ID: #VU43840

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2012-0868

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PostgreSQL: 8.3 - 9.1.2

CPE2.3 External links

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
https://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html
https://rhn.redhat.com/errata/RHSA-2012-0677.html
https://rhn.redhat.com/errata/RHSA-2012-0678.html
https://secunia.com/advisories/49272
https://secunia.com/advisories/49273
https://www.debian.org/security/2012/dsa-2418
https://www.mandriva.com/security/advisories?name=MDVSA-2012:026
https://www.mandriva.com/security/advisories?name=MDVSA-2012:027
https://www.postgresql.org/about/news/1377/
https://www.postgresql.org/docs/8.3/static/release-8-3-18.html
https://www.postgresql.org/docs/8.4/static/release-8-4-11.html
https://www.postgresql.org/docs/9.0/static/release-9-0-7.html
https://www.postgresql.org/docs/9.1/static/release-9-1-3.html


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###