CVE ID:	CVE-2012-0867
Description:	PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.
Test IDs:	1.3.6.1.4.1.25623.1.0.71146
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0867 49273 http://secunia.com/advisories/49273 DSA-2418 http://www.debian.org/security/2012/dsa-2418 MDVSA-2012:026 http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 RHSA-2012:0678 http://rhn.redhat.com/errata/RHSA-2012-0678.html http://www.postgresql.org/about/news/1377/ http://www.postgresql.org/about/news/1377/ http://www.postgresql.org/docs/8.4/static/release-8-4-11.html http://www.postgresql.org/docs/8.4/static/release-8-4-11.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html http://www.postgresql.org/docs/9.1/static/release-9-1-3.html http://www.postgresql.org/docs/9.1/static/release-9-1-3.html openSUSE-SU-2012:1173 http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html