Test ID:	1.3.6.1.4.1.25623.1.0.803473
Category:	Denial of Service
Title:	PostgreSQL Denial of Service Vulnerability (Apr 2013) - Windows
Summary:	PostgreSQL is prone to a denial of service (DoS) vulnerability.
Description:	Summary: PostgreSQL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Improper validation of connection request that contains database name begins with the '-' symbol. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary SQL query, gain access or manipulate arbitrary files, and cause denial of service. Affected Software/OS: PostgreSQL version 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13. Solution: Upgrade to PostgreSQL 9.0.13, 9.1.9, 9.2.4 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1899 http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html Debian Security Information: DSA-2658 (Google Search) http://www.debian.org/security/2013/dsa-2658 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 SuSE Security Announcement: SUSE-SU-2013:0633 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html SuSE Security Announcement: openSUSE-SU-2013:0627 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html SuSE Security Announcement: openSUSE-SU-2013:0628 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html SuSE Security Announcement: openSUSE-SU-2013:0635 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html http://www.ubuntu.com/usn/USN-1789-1
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.