4.9
CVE-2012-3488
- EPSS 3.3%
- Veröffentlicht 03.10.2012 21:55:00
- Zuletzt bearbeitet 16.06.2026 23:43:19
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginThe libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Postgresql ≫ Postgresql Version9.1
Postgresql ≫ Postgresql Version9.1.1
Postgresql ≫ Postgresql Version9.1.2
Postgresql ≫ Postgresql Version9.1.3
Postgresql ≫ Postgresql Version9.1.4
Postgresql ≫ Postgresql Version8.4
Postgresql ≫ Postgresql Version8.4.1
Postgresql ≫ Postgresql Version8.4.2
Postgresql ≫ Postgresql Version8.4.3
Postgresql ≫ Postgresql Version8.4.4
Postgresql ≫ Postgresql Version8.4.5
Postgresql ≫ Postgresql Version8.4.6
Postgresql ≫ Postgresql Version8.4.7
Postgresql ≫ Postgresql Version8.4.8
Postgresql ≫ Postgresql Version8.4.9
Postgresql ≫ Postgresql Version8.4.10
Postgresql ≫ Postgresql Version8.4.11
Postgresql ≫ Postgresql Version8.4.12
Postgresql ≫ Postgresql Version8.3
Postgresql ≫ Postgresql Version8.3.1
Postgresql ≫ Postgresql Version8.3.2
Postgresql ≫ Postgresql Version8.3.3
Postgresql ≫ Postgresql Version8.3.4
Postgresql ≫ Postgresql Version8.3.5
Postgresql ≫ Postgresql Version8.3.6
Postgresql ≫ Postgresql Version8.3.7
Postgresql ≫ Postgresql Version8.3.8
Postgresql ≫ Postgresql Version8.3.9
Postgresql ≫ Postgresql Version8.3.10
Postgresql ≫ Postgresql Version8.3.11
Postgresql ≫ Postgresql Version8.3.12
Postgresql ≫ Postgresql Version8.3.13
Postgresql ≫ Postgresql Version8.3.14
Postgresql ≫ Postgresql Version8.3.15
Postgresql ≫ Postgresql Version8.3.16
Postgresql ≫ Postgresql Version8.3.17
Postgresql ≫ Postgresql Version8.3.18
Postgresql ≫ Postgresql Version8.3.19
Postgresql ≫ Postgresql Version9.0
Postgresql ≫ Postgresql Version9.0.1
Postgresql ≫ Postgresql Version9.0.2
Postgresql ≫ Postgresql Version9.0.3
Postgresql ≫ Postgresql Version9.0.4
Postgresql ≫ Postgresql Version9.0.5
Postgresql ≫ Postgresql Version9.0.6
Postgresql ≫ Postgresql Version9.0.7
Postgresql ≫ Postgresql Version9.0.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.3% | 0.869 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.9 | 6.8 | 4.9 |
AV:N/AC:M/Au:S/C:P/I:P/A:N
|
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html
http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html
http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html
http://secunia.com/advisories/50718
http://www.postgresql.org/support/security/
http://secunia.com/advisories/50859
http://rhn.redhat.com/errata/RHSA-2012-1263.html
http://rhn.redhat.com/errata/RHSA-2012-1264.html
http://secunia.com/advisories/50635
http://secunia.com/advisories/50636
http://secunia.com/advisories/50946
http://www.debian.org/security/2012/dsa-2534
http://www.mandriva.com/security/advisories?name=MDVSA-2012:139
http://www.postgresql.org/about/news/1407/
http://www.postgresql.org/docs/8.3/static/release-8-3-20.html
http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
http://www.postgresql.org/docs/9.0/static/release-9-0-9.html
http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
http://www.securityfocus.com/bid/55072
http://www.ubuntu.com/usn/USN-1542-1
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_postgresql2
https://bugzilla.redhat.com/show_bug.cgi?id=849172