oval:org.mitre.oval:def:6869

Definition Id: oval:org.mitre.oval:def:6869

Oval ID:	oval:org.mitre.oval:def:6869
Title:	DSA-1964 postgresql-7.4, postgresql-8.1, postgresql-8.3 -- several vulnerabilities
Description:	Several vulnerabilities have been discovered in PostgreSQL, a database server. The Common Vulnerabilities and Exposures project identifies the following problems: It was discovered that PostgreSQL did not properly verify the Common Name attribute in X.509 certificates, enabling attackers to bypass the TLS protection on client-server connections, by relying on a certificate from a trusted CA which contains an embedded NUL byte in the Common Name. Authenticated database users could elevate their privileges by creating specially-crafted index functions. The following matrix shows fixed source package versions for the respective distributions. In addition to these security fixes, the updates contain reliability improvements and fix other defects. We recommend that you upgrade your PostgreSQL packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1964 CVE-2009-4034 CVE-2009-4136	Version:	7
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	postgresql-7.4 postgresql-8.1 postgresql-8.3
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section postgresql-doc-8.3 is earlier than 8.3.9-0lenny1 AND postgresql-doc is earlier than 8.3.9-0lenny1 AND postgresql-client is earlier than 8.3.9-0lenny1 AND postgresql is earlier than 8.3.9-0lenny1 AND postgresql-contrib is earlier than 8.3.9-0lenny1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section postgresql-client-8.3 is earlier than 8.3.9-0lenny1 AND postgresql-plperl-8.3 is earlier than 8.3.9-0lenny1 AND postgresql-8.3 is earlier than 8.3.9-0lenny1 AND libecpg6 is earlier than 8.3.9-0lenny1 AND libpq-dev is earlier than 8.3.9-0lenny1 AND postgresql-plpython-8.3 is earlier than 8.3.9-0lenny1 AND postgresql-contrib-8.3 is earlier than 8.3.9-0lenny1 AND postgresql-server-dev-8.3 is earlier than 8.3.9-0lenny1 AND libecpg-dev is earlier than 8.3.9-0lenny1 AND postgresql-pltcl-8.3 is earlier than 8.3.9-0lenny1 AND libpq5 is earlier than 8.3.9-0lenny1 AND libpgtypes3 is earlier than 8.3.9-0lenny1 AND libecpg-compat3 is earlier than 8.3.9-0lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section postgresql-doc-8.1 is earlier than 8.1.19-0etch1 AND postgresql-server-dev-7.4 is earlier than 1:7.4.27-0etch1 AND postgresql-doc-7.4 is earlier than 1:7.4.27-0etch1 AND postgresql-7.4 is earlier than 1:7.4.27-0etch1 AND postgresql-client-8.1 is earlier than 8.1.19-0etch1 AND postgresql-8.1 is earlier than 8.1.19-0etch1 AND libpq-dev is earlier than 8.1.19-0etch1 AND postgresql-plpython-7.4 is earlier than 1:7.4.27-0etch1 AND postgresql-contrib-8.1 is earlier than 8.1.19-0etch1 AND postgresql-contrib-7.4 is earlier than 1:7.4.27-0etch1 AND libecpg5 is earlier than 8.1.19-0etch1 AND postgresql-pltcl-8.1 is earlier than 8.1.19-0etch1 AND postgresql-client-7.4 is earlier than 1:7.4.27-0etch1 AND libpgtypes2 is earlier than 8.1.19-0etch1 AND postgresql-server-dev-8.1 is earlier than 8.1.19-0etch1 AND libecpg-dev is earlier than 8.1.19-0etch1 AND postgresql-plpython-8.1 is earlier than 8.1.19-0etch1 AND libpq4 is earlier than 8.1.19-0etch1 AND postgresql-plperl-7.4 is earlier than 1:7.4.27-0etch1 AND postgresql-plperl-8.1 is earlier than 8.1.19-0etch1 AND postgresql-pltcl-7.4 is earlier than 1:7.4.27-0etch1 AND libecpg-compat2 is earlier than 8.1.19-0etch1

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:6869

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:6869

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0381s

Facebook rss twitter linkedin mail