CVE-2013-1901

EPSS 0.24%
Veröffentlicht 04.04.2013 17:55:00
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 19

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Postgresql ≫ Postgresql Version9.2

Postgresql ≫ Postgresql Version9.2.1

Postgresql ≫ Postgresql Version9.2.2

Postgresql ≫ Postgresql Version9.2.3

Postgresql ≫ Postgresql Version9.1

Postgresql ≫ Postgresql Version9.1.1

Postgresql ≫ Postgresql Version9.1.2

Postgresql ≫ Postgresql Version9.1.3

Postgresql ≫ Postgresql Version9.1.4

Postgresql ≫ Postgresql Version9.1.5

Postgresql ≫ Postgresql Version9.1.6

Postgresql ≫ Postgresql Version9.1.7

Postgresql ≫ Postgresql Version9.1.8

Canonical ≫ Ubuntu Linux Version8.04 Update- Editionlts

Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts

Canonical ≫ Ubuntu Linux Version12.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.473

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

http://support.apple.com/kb/HT5880

http://www.mandriva.com/security/advisories?name=MDVSA-2013:142

http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html

http://support.apple.com/kb/HT5892

http://www.debian.org/security/2013/dsa-2658

http://www.postgresql.org/about/news/1456/

Vendor Advisory

http://www.postgresql.org/docs/current/static/release-9-1-9.html

http://www.postgresql.org/docs/current/static/release-9-2-4.html

http://www.ubuntu.com/usn/USN-1789-1

https://nvd.nist.gov/vuln/detail/CVE-2013-1901

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1901

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1901

EUVD