Test ID:	1.3.6.1.4.1.25623.1.0.840921
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1378-1)
Summary:	The remote host is missing an update for the 'postgresql-8.3, postgresql-8.4, postgresql-9.1' package(s) announced via the USN-1378-1 advisory.
Description:	Summary: The remote host is missing an update for the 'postgresql-8.3, postgresql-8.4, postgresql-9.1' package(s) announced via the USN-1378-1 advisory. Vulnerability Insight: It was discovered that PostgreSQL incorrectly checked permissions on functions called by a trigger. An attacker could attach a trigger to a table they owned and possibly escalate privileges. (CVE-2012-0866) It was discovered that PostgreSQL incorrectly truncated SSL certificate name checks to 32 characters. If a host name was exactly 32 characters, this issue could be exploited by an attacker to spoof the SSL certificate. This issue affected Ubuntu 10.04 LTS, Ubuntu 10.10, Ubuntu 11.04 and Ubuntu 11.10. (CVE-2012-0867) It was discovered that the PostgreSQL pg_dump utility incorrectly filtered line breaks in object names. An attacker could create object names that execute arbitrary SQL commands when a dump script is reloaded. (CVE-2012-0868) Affected Software/OS: 'postgresql-8.3, postgresql-8.4, postgresql-9.1' package(s) on Ubuntu 8.04, Ubuntu 10.04, Ubuntu 10.10, Ubuntu 11.04, Ubuntu 11.10. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0866 49272 http://secunia.com/advisories/49272 49273 http://secunia.com/advisories/49273 DSA-2418 http://www.debian.org/security/2012/dsa-2418 MDVSA-2012:026 http://www.mandriva.com/security/advisories?name=MDVSA-2012:026 MDVSA-2012:027 http://www.mandriva.com/security/advisories?name=MDVSA-2012:027 MDVSA-2012:092 http://www.mandriva.com/security/advisories?name=MDVSA-2012:092 RHSA-2012:0677 http://rhn.redhat.com/errata/RHSA-2012-0677.html RHSA-2012:0678 http://rhn.redhat.com/errata/RHSA-2012-0678.html http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://www.postgresql.org/about/news/1377/ http://www.postgresql.org/docs/8.3/static/release-8-3-18.html http://www.postgresql.org/docs/8.4/static/release-8-4-11.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html http://www.postgresql.org/docs/9.1/static/release-9-1-3.html openSUSE-SU-2012:1173 http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html Common Vulnerability Exposure (CVE) ID: CVE-2012-0867 Common Vulnerability Exposure (CVE) ID: CVE-2012-0868
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.