Update to latest Postgres releases --- resolves some security and data loss bugs http://www.postgresql.org/docs/9.1/static/release-9-1-3.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

PostgreSQL is an advanced object-relational database management system (DBMS).

The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by a SQL command.
This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation.
(CVE-2012-0868)

CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing.
(CVE-2012-0866)

All PostgreSQL users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. If the postgresql service is running, it will be automatically restarted after installing this update.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0677 advisory.

    PostgreSQL is an advanced object-relational database management system     (DBMS).

    The pg_dump utility inserted object names literally into comments in the     SQL script it produces. An unprivileged database user could create an     object whose name includes a newline followed by an SQL command. This SQL     command might then be executed by a privileged user during later restore of     the backup dump, allowing privilege escalation. (CVE-2012-0868)

    CREATE TRIGGER did not do a permissions check on the trigger function to     be called. This could possibly allow an authenticated database user to     call a privileged trigger function on data of their choosing.
    (CVE-2012-0866)

    All PostgreSQL users are advised to upgrade to these updated packages,     which contain backported patches to correct these issues. If the postgresql     service is running, it will be automatically restarted after installing     this update.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0678 advisory.

    PostgreSQL is an advanced object-relational database management system     (DBMS).

    The pg_dump utility inserted object names literally into comments in the     SQL script it produces. An unprivileged database user could create an     object whose name includes a newline followed by an SQL command. This SQL     command might then be executed by a privileged user during later restore of     the backup dump, allowing privilege escalation. (CVE-2012-0868)

    When configured to do SSL certificate verification, PostgreSQL only checked     the first 31 characters of the certificate's Common Name field. Depending     on the configuration, this could allow an attacker to impersonate a server     or a client using a certificate from a trusted Certificate Authority issued     for a different name. (CVE-2012-0867)

    CREATE TRIGGER did not do a permissions check on the trigger function to     be called. This could possibly allow an authenticated database user to     call a privileged trigger function on data of their choosing.
    (CVE-2012-0866)

    These updated packages upgrade PostgreSQL to version 8.4.11, which fixes     these issues as well as several data-corruption issues and lesser     non-security issues. Refer to the PostgreSQL Release Notes for a full list     of changes:

    http://www.postgresql.org/docs/8.4/static/release.html

    All PostgreSQL users are advised to upgrade to these updated packages,     which correct these issues. If the postgresql service is running, it will     be automatically restarted after installing this update.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities has been discovered and corrected in postgresql :

Fix incorrect password transformation in contrib/pgcrypto's DES crypt() function (Solar Designer). If a password string contained the byte value 0x80, the remainder of the password was ignored, causing the password to be much weaker than it appeared. With this fix, the rest of the string is properly included in the DES hash. Any stored password values that are affected by this bug will thus no longer match, so the stored values may need to be updated (CVE-2012-2143).

Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler (Tom Lane). Applying such attributes to a call handler could crash the server (CVE-2012-2655).

This advisory provides the latest versions of PostgreSQL that is not vulnerable to these issues.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0678 advisory.

    [8.4.11-1]
    - Update to PostgreSQL 8.4.11, for various fixes described at       http://www.postgresql.org/docs/8.4/static/release-8-4-11.html       http://www.postgresql.org/docs/8.4/static/release-8-4-10.html       including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868     Resolves: #812081

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- Security and bugfix release 9.1.3 :

  - Require execute permission on the trigger function for     'CREATE TRIGGER' (CVE-2012-0866, bnc#749299).

  - Remove arbitrary limitation on length of common name in     SSL certificates (CVE-2012-0867, bnc#749301).

  - Convert newlines to spaces in names written in pg_dump     comments (CVE-2012-0868, bnc#749303).

See the release notes for the rest of the changes:
http://www.postgresql.org/docs/9.1/static/release-9-1-3.html /usr/share/doc/packages/postgresql/HISTORY

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-570:01 advisory.

    PostgreSQL is an advanced Object-Relational database management system (DBMS) that supports almost all SQL     constructs (including transactions, subselects and user-defined types and functions). The postgresql     package includes the client programs and libraries that you'll need to access a PostgreSQL DBMS server.
    These PostgreSQL client programs are programs that directly manipulate the internal structure of     PostgreSQL databases on a PostgreSQL server. These client programs can be located on the same machine with     the PostgreSQL server, or may be on a remote machine which accesses a PostgreSQL server over a network     connection. This package contains the docs in HTML for the whole package, as well as command-line     utilities for managing PostgreSQL databases on a PostgreSQL server.
    If you want to manipulate a PostgreSQL database on a remote PostgreSQL server, you need this package. You     also need to install this package if you're installing the postgresql-server package.
    Security issues fixed with this release:
    CVE-2012-0866     CVE-2012-0868     No description available at the time of writing, please use the CVE links below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

PostgreSQL is an advanced object-relational database management system (DBMS).

The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by a SQL command.
This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation.
(CVE-2012-0868)

CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing.
(CVE-2012-0866)

All PostgreSQL users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. If the postgresql service is running, it will be automatically restarted after installing this update.

The version of PostgreSQL installed on the remote host is 8.3.x prior to 8.3.18, and is, therefore, potentially affected by multiple vulnerabilities :

  - Permissions on a function called by a trigger are not     properly checked. (CVE-2012-0866)   
  - Line breaks in object names can be exploited to execute     arbitrary SQL commands when reloading a pg_dump file.
    (CVE-2012-0868)

The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by a SQL command.
This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation.
(CVE-2012-0868)

When configured to do SSL certificate verification, PostgreSQL only checked the first 31 characters of the certificate's Common Name field. Depending on the configuration, this could allow an attacker to impersonate a server or a client using a certificate from a trusted Certificate Authority issued for a different name. (CVE-2012-0867)

CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing.
(CVE-2012-0866)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
58257	Fedora 17 : postgresql-9.1.3-1.fc17 (2012-2508)	Nessus	Fedora Local Security Checks	2012/3/7	2021/1/11	medium
59213	CentOS 5 : postgresql (CESA-2012:0677)	Nessus	CentOS Local Security Checks	2012/5/22	2021/1/4	medium
59222	RHEL 5 : postgresql (RHSA-2012:0677)	Nessus	Red Hat Local Security Checks	2012/5/22	2024/11/4	critical
59223	RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2012:0678)	Nessus	Red Hat Local Security Checks	2012/5/22	2024/11/4	critical
59518	Mandriva Linux Security Advisory : postgresql (MDVSA-2012:092)	Nessus	Mandriva Local Security Checks	2012/6/15	2021/1/6	medium
68529	Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2012-0678)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
74591	openSUSE Security Update : postgresql (openSUSE-SU-2012:0480-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
284271	MiracleLinux 3 : postgresql-8.1.23-4.0.1.AXS3 (AXSA:2012-570:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
61317	Scientific Linux Security Update : postgresql on SL5.x i386/x86_64 (20120521)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
63355	PostgreSQL 8.3 < 8.3.18 Multiple Vulnerabilities	Nessus	Databases	2012/12/28	2026/1/22	high
69689	Amazon Linux AMI : postgresql8 (ALAS-2012-82)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	medium

检测

插件搜索

medium

medium

critical

critical

medium

critical

medium

critical

medium

high

medium