ID de Prueba:	1.3.6.1.4.1.25623.1.0.831557
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Update for postgresql MDVSA-2012:026 (postgresql)
Resumen:	The remote host is missing an update for the 'postgresql'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'postgresql' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities has been discovered and corrected in postgresql: Permissions on a function called by a trigger are not properly checked (CVE-2012-0866). SSL certificate name checks are truncated to 32 characters, allowing connection spoofing under some circumstances when using third party certificate authorities (CVE-2012-0867). Line breaks in object names can be exploited to execute arbitrary SQL when reloading a pg_dump file (CVE-2012-0868). This advisory provides the latest versions of PostgreSQL that is not vulnerable to these issues. Affected Software/OS: postgresql on Mandriva Linux 2011.0, Mandriva Linux 2010.1 Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0866 49272 http://secunia.com/advisories/49272 49273 http://secunia.com/advisories/49273 DSA-2418 http://www.debian.org/security/2012/dsa-2418 MDVSA-2012:026 http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 MDVSA-2012:027 http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 MDVSA-2012:092 http://www.mandriva.com/security/advisories?name=MDVSA-2012:092 RHSA-2012:0677 http://rhn.redhat.com/errata/RHSA-2012-0677.html RHSA-2012:0678 http://rhn.redhat.com/errata/RHSA-2012-0678.html http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://www.postgresql.org/about/news/1377/ http://www.postgresql.org/docs/8.3/static/release-8-3-18.html http://www.postgresql.org/docs/8.4/static/release-8-4-11.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html http://www.postgresql.org/docs/9.1/static/release-9-1-3.html openSUSE-SU-2012:1173 http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html Common Vulnerability Exposure (CVE) ID: CVE-2012-0867 Common Vulnerability Exposure (CVE) ID: CVE-2012-0868
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.