Test ID:	1.3.6.1.4.1.25623.1.0.71134
Category:	Mandrake Local Security Checks
Title:	Mandriva Security Advisory MDVSA-2012:027 (postgresql8.3)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to postgresql8.3 announced via advisory MDVSA-2012:027. Multiple vulnerabilities has been discovered and corrected in postgresql: Permissions on a function called by a trigger are not properly checked (CVE-2012-0866). Line breaks in object names can be exploited to execute arbitrary SQL when reloading a pg_dump file (CVE-2012-0868). This advisory provides the latest version of PostgreSQL that is not vulnerable to these issues. Affected: Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:027 http://www.postgresql.org/docs/8.3/static/release-8-3-18.html Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0866 49272 http://secunia.com/advisories/49272 49273 http://secunia.com/advisories/49273 DSA-2418 http://www.debian.org/security/2012/dsa-2418 MDVSA-2012:026 http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 MDVSA-2012:027 http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 MDVSA-2012:092 http://www.mandriva.com/security/advisories?name=MDVSA-2012:092 RHSA-2012:0677 http://rhn.redhat.com/errata/RHSA-2012-0677.html RHSA-2012:0678 http://rhn.redhat.com/errata/RHSA-2012-0678.html http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://www.postgresql.org/about/news/1377/ http://www.postgresql.org/docs/8.3/static/release-8-3-18.html http://www.postgresql.org/docs/8.4/static/release-8-4-11.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html http://www.postgresql.org/docs/9.1/static/release-9-1-3.html openSUSE-SU-2012:1173 http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html Common Vulnerability Exposure (CVE) ID: CVE-2012-0868
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.