|
|
| |
|
| |
postgresql: multiple vulnerabilities
| Package(s): | postgresql-8.3, postgresql-8.4, postgresql-9.1 |
CVE #(s): | CVE-2012-2143
CVE-2012-2655
|
| Created: | June 5, 2012 |
Updated: | September 28, 2012 |
| Description: |
From the Ubuntu advisory:
It was discovered that PostgreSQL incorrectly handled certain bytes passed
to the crypt() function when using DES encryption. An attacker could use
this flaw to incorrectly handle authentication. (CVE-2012-2143)
It was discovered that PostgreSQL incorrectly handled SECURITY DEFINER and
SET attributes on procedural call handlers. An attacker could use this flaw
to cause PostgreSQL to crash, leading to a denial of service.
(CVE-2012-2655) |
| Alerts: |
|
( Log in to post comments)
|
|
|