6.5 - CVE-2009-3230

Executive Summary

Informations
Name	CVE-2009-3230	First vendor Publication	2009-09-17
Vendor	Cve	Last vendor Modification	2018-10-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:P)
Cvss Base Score	6.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	8	Authentication	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3230

CAPEC : Common Attack Pattern Enumeration & Classification

Id	Name
CAPEC-1	Accessing Functionality Not Properly Constrained by ACLs
CAPEC-13	Subverting Environment Variable Values
CAPEC-17	Accessing, Modifying or Executing Executable Files
CAPEC-39	Manipulating Opaque Client-based Data Tokens
CAPEC-45	Buffer Overflow via Symbolic Links
CAPEC-51	Poison Web Service Registry
CAPEC-59	Session Credential Falsification through Prediction
CAPEC-60	Reusing Session IDs (aka Session Replay)
CAPEC-76	Manipulating Input to File System Calls
CAPEC-77	Manipulating User-Controlled Variables
CAPEC-87	Forceful Browsing
CAPEC-104	Cross Zone Scripting

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10166

Oval ID:	oval:org.mitre.oval:def:10166
Title:	The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
Description:	The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3230	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section rh-postgresql-devel is earlier than 0:7.3.21-2 AND rh-postgresql-server is earlier than 0:7.3.21-2 AND rh-postgresql-python is earlier than 0:7.3.21-2 AND rh-postgresql-libs is earlier than 0:7.3.21-2 AND rh-postgresql-docs is earlier than 0:7.3.21-2 AND rh-postgresql-test is earlier than 0:7.3.21-2 AND rh-postgresql-pl is earlier than 0:7.3.21-2 AND rh-postgresql-tcl is earlier than 0:7.3.21-2 AND rh-postgresql is earlier than 0:7.3.21-2 AND rh-postgresql-contrib is earlier than 0:7.3.21-2 AND rh-postgresql-jdbc is earlier than 0:7.3.21-2 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section postgresql is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-docs is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-pl is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-tcl is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-libs is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-contrib is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-python is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-test is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-jdbc is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-server is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-devel is earlier than 0:7.4.26-1.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section postgresql is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-docs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-pl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-libs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-python is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-test is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-server is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-devel is earlier than 0:8.1.18-2.el5_4.1

Definition Id: oval:org.mitre.oval:def:22642

Oval ID:	oval:org.mitre.oval:def:22642
Title:	ELSA-2009:1484: postgresql security update (Moderate)
Description:	The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1484-01 CVE-2009-0922 CVE-2009-3230	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	postgresql
Definition Synopsis:
Oracle Linux 5.x rpm test postgresql-docs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-devel is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-test is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-libs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-pl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-server is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-python is earlier than 0:8.1.18-2.el5_4.1

Definition Id: oval:org.mitre.oval:def:28941

Oval ID:	oval:org.mitre.oval:def:28941
Title:	RHSA-2009:1484 -- postgresql security update (Moderate)
Description:	Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system (DBMS). It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0038 did not include protection against misuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. An authenticated user could use this flaw to install malicious code that would later execute with superuser privileges. (CVE-2009-3230)
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1484 CESA-2009:1484-CentOS 5 CVE-2009-0922 CVE-2009-3230	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 4 CentOS Linux 5	Product(s):	postgresql
Definition Synopsis:
Red Hat Enterprise Linux 5 and CentOS Linux 5 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section postgresql-devel is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-pl is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-server is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-test is earlier than 0:8.1.18-2.el5_4.1 AND postgresql is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-docs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-libs is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-python is earlier than 0:8.1.18-2.el5_4.1 AND postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1 AND Red Hat Enterprise Linux 4 release section The operating system installed on the system is Red Hat Enterprise Linux 4 Packages match section postgresql is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-contrib is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-devel is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-docs is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-jdbc is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-libs is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-pl is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-python is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-server is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-tcl is earlier than 0:7.4.26-1.el4_8.1 AND postgresql-test is earlier than 0:7.4.26-1.el4_8.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Postgresql cpe:2.3:a:postgresql:postgresql:8.4:::::::* cpe:2.3:a:postgresql:postgresql:8.3.7:::::::* cpe:2.3:a:postgresql:postgresql:8.3.6:::::::* cpe:2.3:a:postgresql:postgresql:8.3.5:::::::* cpe:2.3:a:postgresql:postgresql:8.3.4:::::::* cpe:2.3:a:postgresql:postgresql:8.3.3:::::::* cpe:2.3:a:postgresql:postgresql:8.3.2:::::::* cpe:2.3:a:postgresql:postgresql:8.3.1:::::::* cpe:2.3:a:postgresql:postgresql:8.2.9:::::::* cpe:2.3:a:postgresql:postgresql:8.2.8:::::::* cpe:2.3:a:postgresql:postgresql:8.2.7:::::::* cpe:2.3:a:postgresql:postgresql:8.2.6:::::::* cpe:2.3:a:postgresql:postgresql:8.2.5:::::::* cpe:2.3:a:postgresql:postgresql:8.2.4:::::::* cpe:2.3:a:postgresql:postgresql:8.2.3:::::::* cpe:2.3:a:postgresql:postgresql:8.2.2:::::::* cpe:2.3:a:postgresql:postgresql:8.2.13:::::::* cpe:2.3:a:postgresql:postgresql:8.2.12:::::::* cpe:2.3:a:postgresql:postgresql:8.2.11:::::::* cpe:2.3:a:postgresql:postgresql:8.2.10:::::::* cpe:2.3:a:postgresql:postgresql:8.2.1:::::::* cpe:2.3:a:postgresql:postgresql:8.2:::::::* cpe:2.3:a:postgresql:postgresql:8.1.9:::::::* cpe:2.3:a:postgresql:postgresql:8.1.8:::::::* cpe:2.3:a:postgresql:postgresql:8.1.7:::::::* cpe:2.3:a:postgresql:postgresql:8.1.6:::::::* cpe:2.3:a:postgresql:postgresql:8.1.5:::::::* cpe:2.3:a:postgresql:postgresql:8.1.4:::::::* cpe:2.3:a:postgresql:postgresql:8.1.3:::::::* cpe:2.3:a:postgresql:postgresql:8.1.2:::::::* cpe:2.3:a:postgresql:postgresql:8.1.16:::::::* cpe:2.3:a:postgresql:postgresql:8.1.15:::::::* cpe:2.3:a:postgresql:postgresql:8.1.14:::::::* cpe:2.3:a:postgresql:postgresql:8.1.13:::::::* cpe:2.3:a:postgresql:postgresql:8.1.12:::::::* cpe:2.3:a:postgresql:postgresql:8.1.11:::::::* cpe:2.3:a:postgresql:postgresql:8.1.10:::::::* cpe:2.3:a:postgresql:postgresql:8.1.1:::::::* cpe:2.3:a:postgresql:postgresql:8.1:::::::* cpe:2.3:a:postgresql:postgresql:8.0.9:::::::* cpe:2.3:a:postgresql:postgresql:8.0.8:::::::* cpe:2.3:a:postgresql:postgresql:8.0.7:::::::* cpe:2.3:a:postgresql:postgresql:8.0.6:::::::* cpe:2.3:a:postgresql:postgresql:8.0.5:::::::* cpe:2.3:a:postgresql:postgresql:8.0.4:::::::* cpe:2.3:a:postgresql:postgresql:8.0.3:::::::* cpe:2.3:a:postgresql:postgresql:8.0.21:::::::* cpe:2.3:a:postgresql:postgresql:8.0.20:::::::* cpe:2.3:a:postgresql:postgresql:8.0.2:::::::* cpe:2.3:a:postgresql:postgresql:8.0.19:::::::* cpe:2.3:a:postgresql:postgresql:8.0.18:::::::* cpe:2.3:a:postgresql:postgresql:8.0.17:::::::* cpe:2.3:a:postgresql:postgresql:8.0.16:::::::* cpe:2.3:a:postgresql:postgresql:8.0.15:::::::* cpe:2.3:a:postgresql:postgresql:8.0.14:::::::* cpe:2.3:a:postgresql:postgresql:8.0.13:::::::* cpe:2.3:a:postgresql:postgresql:8.0.12:::::::* cpe:2.3:a:postgresql:postgresql:8.0.11:::::::* cpe:2.3:a:postgresql:postgresql:8.0.10:::::::* cpe:2.3:a:postgresql:postgresql:8.0.1:::::::* cpe:2.3:a:postgresql:postgresql:8.0:::::::* cpe:2.3:a:postgresql:postgresql:7.4.9:::::::* cpe:2.3:a:postgresql:postgresql:7.4.8:::::::* cpe:2.3:a:postgresql:postgresql:7.4.7:::::::* cpe:2.3:a:postgresql:postgresql:7.4.6:::::::* cpe:2.3:a:postgresql:postgresql:7.4.5:::::::* cpe:2.3:a:postgresql:postgresql:7.4.4:::::::* cpe:2.3:a:postgresql:postgresql:7.4.3:::::::* cpe:2.3:a:postgresql:postgresql:7.4.25:::::::* cpe:2.3:a:postgresql:postgresql:7.4.24:::::::* cpe:2.3:a:postgresql:postgresql:7.4.23:::::::* cpe:2.3:a:postgresql:postgresql:7.4.22:::::::* cpe:2.3:a:postgresql:postgresql:7.4.21:::::::* cpe:2.3:a:postgresql:postgresql:7.4.20:::::::* cpe:2.3:a:postgresql:postgresql:7.4.2:::::::* cpe:2.3:a:postgresql:postgresql:7.4.19:::::::* cpe:2.3:a:postgresql:postgresql:7.4.18:::::::* cpe:2.3:a:postgresql:postgresql:7.4.17:::::::* cpe:2.3:a:postgresql:postgresql:7.4.16:::::::* cpe:2.3:a:postgresql:postgresql:7.4.15:::::::* cpe:2.3:a:postgresql:postgresql:7.4.14:::::::* cpe:2.3:a:postgresql:postgresql:7.4.13:::::::* cpe:2.3:a:postgresql:postgresql:7.4.12:::::::* cpe:2.3:a:postgresql:postgresql:7.4.11:::::::* cpe:2.3:a:postgresql:postgresql:7.4.10:::::::* cpe:2.3:a:postgresql:postgresql:7.4.1:::::::* cpe:2.3:a:postgresql:postgresql:7.4:::::::*	87

OpenVAS Exploits

Date	Description
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-22 (postgresql-server postgresql-base) File : nvt/glsa_201110_22.nasl
2011-08-09	Name : CentOS Update for postgresql CESA-2009:1484 centos4 i386 File : nvt/gb_CESA-2009_1484_postgresql_centos4_i386.nasl
2011-08-09	Name : CentOS Update for postgresql CESA-2009:1484 centos5 i386 File : nvt/gb_CESA-2009_1484_postgresql_centos5_i386.nasl
2011-08-09	Name : CentOS Update for rh-postgresql CESA-2009:1485 centos3 i386 File : nvt/gb_CESA-2009_1485_rh-postgresql_centos3_i386.nasl
2009-12-30	Name : FreeBSD Ports: postgresql-client, postgresql-server File : nvt/freebsd_postgresql-client.nasl
2009-12-14	Name : Mandriva Security Advisory MDVSA-2009:251-1 (postgresql8.2) File : nvt/mdksa_2009_251_1.nasl
2009-10-27	Name : SuSE Security Summary SUSE-SR:2009:017 File : nvt/suse_sr_2009_017.nasl
2009-10-19	Name : SuSE Security Summary SUSE-SR:2009:016 File : nvt/suse_sr_2009_016.nasl
2009-10-13	Name : RedHat Security Advisory RHSA-2009:1484 File : nvt/RHSA_2009_1484.nasl
2009-10-13	Name : SLES10: Security update for PostgreSQL File : nvt/sles10_postgresql0.nasl
2009-10-13	Name : CentOS Security Advisory CESA-2009:1485 (postgresql) File : nvt/ovcesa2009_1485.nasl
2009-10-13	Name : CentOS Security Advisory CESA-2009:1484 (postgresql) File : nvt/ovcesa2009_1484.nasl
2009-10-13	Name : RedHat Security Advisory RHSA-2009:1485 File : nvt/RHSA_2009_1485.nasl
2009-10-11	Name : SLES11: Security update for PostgreSQL File : nvt/sles11_postgresql0.nasl
2009-10-10	Name : SLES9: Security update for PostgreSQL File : nvt/sles9p5059340.nasl
2009-10-06	Name : Debian Security Advisory DSA 1900-1 (postgresql-7.4, postgresql-8.1, postgres... File : nvt/deb_1900_1.nasl
2009-10-01	Name : PostgreSQL Multiple Security Vulnerabilities File : nvt/postgreSQL_multiple_security_vulnerabilities.nasl
2009-09-28	Name : RedHat Security Advisory RHSA-2009:1461 File : nvt/RHSA_2009_1461.nasl
2009-09-28	Name : Ubuntu USN-834-1 (postgresql-8.3) File : nvt/ubuntu_834_1.nasl
2009-08-17	Name : Mandrake Security Advisory MDVSA-2009:177 (ruby) File : nvt/mdksa_2009_177.nasl
2009-08-17	Name : Mandrake Security Advisory MDVSA-2009:176 (git) File : nvt/mdksa_2009_176.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
57901	PostgreSQL RESET SESSION AUTHORIZATION Remote Privilege Escalation

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1484.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1485.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091007_postgresql_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2011-10-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-22.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_postgresql-6535.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1900.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1484.nasl - Type : ACT_GATHER_INFO
2009-12-17	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_e7bc5600eaa011debd9c00215c6a37bb.nasl - Type : ACT_GATHER_INFO
2009-12-16	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-333.nasl - Type : ACT_GATHER_INFO
2009-10-08	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1485.nasl - Type : ACT_GATHER_INFO
2009-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1485.nasl - Type : ACT_GATHER_INFO
2009-10-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1484.nasl - Type : ACT_GATHER_INFO
2009-10-06	Name : The remote openSUSE host is missing a security update. File : suse_postgresql-6502.nasl - Type : ACT_GATHER_INFO
2009-10-02	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-251.nasl - Type : ACT_GATHER_INFO
2009-09-29	Name : The remote openSUSE host is missing a security update. File : suse_11_1_postgresql-090917.nasl - Type : ACT_GATHER_INFO
2009-09-29	Name : The remote openSUSE host is missing a security update. File : suse_11_0_postgresql-090917.nasl - Type : ACT_GATHER_INFO
2009-09-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_postgresql-6500.nasl - Type : ACT_GATHER_INFO
2009-09-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_postgresql-090917.nasl - Type : ACT_GATHER_INFO
2009-09-28	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12509.nasl - Type : ACT_GATHER_INFO
2009-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-834-1.nasl - Type : ACT_GATHER_INFO
2009-09-14	Name : The remote Fedora host is missing a security update. File : fedora_2009-9474.nasl - Type : ACT_GATHER_INFO
2009-09-14	Name : The remote Fedora host is missing a security update. File : fedora_2009-9473.nasl - Type : ACT_GATHER_INFO
2009-06-28	Name : The remote host is missing Sun Security Patch number 138827-12 File : solaris10_x86_138827.nasl - Type : ACT_GATHER_INFO
2009-06-28	Name : The remote host is missing Sun Security Patch number 138826-12 File : solaris10_138826.nasl - Type : ACT_GATHER_INFO
2008-02-05	Name : The remote host is missing Sun Security Patch number 136999-10 File : solaris10_x86_136999.nasl - Type : ACT_GATHER_INFO
2008-02-05	Name : The remote host is missing Sun Security Patch number 136998-10 File : solaris10_136998.nasl - Type : ACT_GATHER_INFO
2007-03-18	Name : The remote host is missing Sun Security Patch number 123591-12 File : solaris10_x86_123591.nasl - Type : ACT_GATHER_INFO
2007-03-18	Name : The remote host is missing Sun Security Patch number 123590-12 File : solaris10_123590.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/36314
BUGTRAQ	http://www.securityfocus.com/archive/1/509917/100/0/threaded
CONFIRM	http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012 http://www.postgresql.org/docs/8.3/static/release-8-3-8.html http://www.postgresql.org/support/security.html https://bugzilla.redhat.com/show_bug.cgi?id=522085
DEBIAN	http://www.us.debian.org/security/2009/dsa-1900
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2009-September/msg003... https://www.redhat.com/archives/fedora-package-announce/2009-September/msg003...
HP	http://marc.info/?l=bugtraq&m=134124585221119&w=2
MLIST	http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
SECUNIA	http://secunia.com/advisories/36660 http://secunia.com/advisories/36695 http://secunia.com/advisories/36727 http://secunia.com/advisories/36800 http://secunia.com/advisories/36837
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
UBUNTU	http://www.ubuntu.com/usn/usn-834-1
VUPEN	http://www.vupen.com/english/advisories/2009/2602

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:10:11	Multiple Updates
2021-04-22 01:10:37	Multiple Updates
2020-05-23 00:24:19	Multiple Updates
2018-10-11 00:19:41	Multiple Updates
2017-09-19 09:23:24	Multiple Updates
2016-08-23 09:24:34	Multiple Updates
2016-04-26 19:07:07	Multiple Updates
2014-02-17 10:51:37	Multiple Updates
2013-05-10 23:57:26	Multiple Updates

Global Informations

Type	Count
Capec ID(s)	12
CWE ID(s)	2
Oval ID(s)	3
CPE ID(s)	87
Sources(s)	22
osvdb(s)	1
Openvas Exploit(s)	21
Nessus® Exploit(s)	28

	Related
8.5	RHSA-2009:1461
8.5	HPSBMU02781 SSR...
8.5	GLSA-201110-22
6.8	USN-834-1
6.8	SUN-270408
6.8	MDVSA-2009:251-1
6.8	MDVSA-2009:177
6.8	DSA-1900
6.5	RHSA-2009:1485
6.5	RHSA-2009:1484
6.5	MDVSA-2009:333
6.5	MDVSA-2009:176
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 12 more Alert(s)

6.5 - CVE-2009-3230

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CAPEC : Common Attack Pattern Enumeration & Classification

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU