Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2012-0866 | First vendor Publication | 2012-07-18 |
| Vendor | Cve | Last vendor Modification | 2016-12-08 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0866 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-10-03 | Name : Gentoo Security Advisory GLSA 201209-24 (PostgreSQL) File : nvt/glsa_201209_24.nasl |
| 2012-08-30 | Name : Fedora Update for postgresql FEDORA-2012-12156 File : nvt/gb_fedora_2012_12156_postgresql_fc16.nasl |
| 2012-08-30 | Name : Fedora Update for postgresql FEDORA-2012-2508 File : nvt/gb_fedora_2012_2508_postgresql_fc17.nasl |
| 2012-08-03 | Name : Mandriva Update for postgresql MDVSA-2012:092 (postgresql) File : nvt/gb_mandriva_MDVSA_2012_092.nasl |
| 2012-07-30 | Name : CentOS Update for postgresql CESA-2012:0677 centos5 File : nvt/gb_CESA-2012_0677_postgresql_centos5.nasl |
| 2012-07-30 | Name : CentOS Update for postgresql84 CESA-2012:0678 centos5 File : nvt/gb_CESA-2012_0678_postgresql84_centos5.nasl |
| 2012-07-30 | Name : CentOS Update for postgresql CESA-2012:0678 centos6 File : nvt/gb_CESA-2012_0678_postgresql_centos6.nasl |
| 2012-06-19 | Name : Fedora Update for postgresql FEDORA-2012-8893 File : nvt/gb_fedora_2012_8893_postgresql_fc16.nasl |
| 2012-06-19 | Name : Fedora Update for postgresql FEDORA-2012-8915 File : nvt/gb_fedora_2012_8915_postgresql_fc15.nasl |
| 2012-05-22 | Name : RedHat Update for postgresql RHSA-2012:0677-01 File : nvt/gb_RHSA-2012_0677-01_postgresql.nasl |
| 2012-05-22 | Name : RedHat Update for postgresql and postgresql84 RHSA-2012:0678-01 File : nvt/gb_RHSA-2012_0678-01_postgresql_and_postgresql84.nasl |
| 2012-04-02 | Name : Fedora Update for postgresql FEDORA-2012-2591 File : nvt/gb_fedora_2012_2591_postgresql_fc16.nasl |
| 2012-03-12 | Name : FreeBSD Ports: postgresql-client File : nvt/freebsd_postgresql-client0.nasl |
| 2012-03-12 | Name : Debian Security Advisory DSA 2418-1 (postgresql-8.4) File : nvt/deb_2418_1.nasl |
| 2012-03-09 | Name : Fedora Update for postgresql FEDORA-2012-2589 File : nvt/gb_fedora_2012_2589_postgresql_fc15.nasl |
| 2012-03-07 | Name : Mandriva Update for postgresql MDVSA-2012:026 (postgresql) File : nvt/gb_mandriva_MDVSA_2012_026.nasl |
| 2012-03-07 | Name : Mandriva Update for postgresql8.3 MDVSA-2012:027 (postgresql8.3) File : nvt/gb_mandriva_MDVSA_2012_027.nasl |
| 2012-03-07 | Name : Ubuntu Update for postgresql-9.1 USN-1378-1 File : nvt/gb_ubuntu_USN_1378_1.nasl |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-06-13 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-603.nasl - Type : ACT_GATHER_INFO |
| 2014-06-13 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-214.nasl - Type : ACT_GATHER_INFO |
| 2013-09-04 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-82.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0678.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0677.nasl - Type : ACT_GATHER_INFO |
| 2013-01-25 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_postgresql-120322.nasl - Type : ACT_GATHER_INFO |
| 2012-12-28 | Name : The remote database server is affected by multiple vulnerabilities. File : postgresql_20120227.nasl - Type : ACT_GATHER_INFO |
| 2012-12-28 | Name : The remote database server is affected by multiple vulnerabilities. File : postgresql_8318.nasl - Type : ACT_GATHER_INFO |
| 2012-09-29 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201209-24.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120521_postgresql_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120521_postgresql_and_postgresql84_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2012-06-15 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-092.nasl - Type : ACT_GATHER_INFO |
| 2012-06-06 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_postgresql-8071.nasl - Type : ACT_GATHER_INFO |
| 2012-05-22 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0677.nasl - Type : ACT_GATHER_INFO |
| 2012-05-22 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0678.nasl - Type : ACT_GATHER_INFO |
| 2012-05-22 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0678.nasl - Type : ACT_GATHER_INFO |
| 2012-05-22 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0677.nasl - Type : ACT_GATHER_INFO |
| 2012-03-08 | Name : The remote Fedora host is missing a security update. File : fedora_2012-2591.nasl - Type : ACT_GATHER_INFO |
| 2012-03-08 | Name : The remote Fedora host is missing a security update. File : fedora_2012-2589.nasl - Type : ACT_GATHER_INFO |
| 2012-03-07 | Name : The remote Fedora host is missing a security update. File : fedora_2012-2508.nasl - Type : ACT_GATHER_INFO |
| 2012-03-01 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-026.nasl - Type : ACT_GATHER_INFO |
| 2012-02-29 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_174b8864623711e1be1814dae938ec40.nasl - Type : ACT_GATHER_INFO |
| 2012-02-29 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1378-1.nasl - Type : ACT_GATHER_INFO |
| 2012-02-28 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2418.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:19:20 |
|
| 2021-04-22 01:23:03 |
|
| 2020-05-23 00:33:01 |
|
| 2016-12-08 09:23:25 |
|
| 2016-04-26 21:33:55 |
|
| 2014-06-14 13:32:25 |
|
| 2014-02-17 11:08:27 |
|
| 2013-05-10 22:34:10 |
|
| 2013-01-04 13:19:15 |
|
