Published: 04/04/2013 Updated: 01/12/2013

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 730

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Argument injection vulnerability in PostgreSQL 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, and 9.0.x prior to 9.0.13 allows remote malicious users to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).

Vulnerable Product	Search on Vulmon	Subscribe to Product
postgresql postgresql 9.2.1
postgresql postgresql 9.2
postgresql postgresql 9.2.2
postgresql postgresql 9.2.3
postgresql postgresql 9.1
postgresql postgresql 9.1.2
postgresql postgresql 9.1.3
postgresql postgresql 9.1.6
postgresql postgresql 9.1.7
postgresql postgresql 9.1.4
postgresql postgresql 9.1.8
postgresql postgresql 9.1.1
postgresql postgresql 9.1.5
postgresql postgresql 9.0.8
postgresql postgresql 9.0.7
postgresql postgresql 9.0.1
postgresql postgresql 9.0.11
postgresql postgresql 9.0.10
postgresql postgresql 9.0
postgresql postgresql 9.0.3
postgresql postgresql 9.0.9
postgresql postgresql 9.0.4
postgresql postgresql 9.0.5
postgresql postgresql 9.0.2
postgresql postgresql 9.0.6
postgresql postgresql 9.0.12
canonical ubuntu linux 8.04
canonical ubuntu linux 11.10
canonical ubuntu linux 10.04
canonical ubuntu linux 12.10
canonical ubuntu linux 12.04

Debian Bug report logs - #704479 postgresql: high-exposure security vulnerability Package: postgresql-91; Maintainer for postgresql-91 is Debian PostgreSQL Maintainers <pkg-postgresql-public@listsaliothdebianorg>; Reported by: Hleb Valoshka <375gnu@gmailcom> Date: Mon, 1 Apr 2013 17:33:01 UTC Severity: critica ...

Several security issues were fixed in PostgreSQL ...

Several vulnerabilities were discovered in PostgreSQL database server CVE-2013-1899 Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center discovered that it was possible for a connection request containing a database name that begins with - to be crafted that can damage or destroy files within a server's data di ...

A vulnerability was discovered in PostgreSQL database server Random numbers generated by contrib/pgcrypto functions may be easy for another database user to guess For the stable distribution (squeeze), this problem has been fixed in version 8417-0squeeze1 For the testing (wheezy) and unstable distribution (sid), postgresql-84 packages have be ...

Argument injection vulnerability in PostgreSQL 92x before 924, 91x before 919, and 90x before 9013 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "- ...

This module can identify PostgreSQL 90, 91, and 92 servers that are vulnerable to command-line flag injection through CVE-2013-1899 This can lead to denial of service, privilege escalation, or even arbitrary code execution ...

This module can identify PostgreSQL 9.0, 9.1, and 9.2 servers that are vulnerable to command-line flag injection through CVE-2013-1899. This can lead to denial of service, privilege escalation, or even arbitrary code execution.

msf > use auxiliary/scanner/postgres/postgres_dbname_flag_injection
msf auxiliary(postgres_dbname_flag_injection) > show actions
    ...actions...
msf auxiliary(postgres_dbname_flag_injection) > set ACTION < action-name >
msf auxiliary(postgres_dbname_flag_injection) > show options
    ...show and set options...
msf auxiliary(postgres_dbname_flag_injection) > run

This module can identify PostgreSQL 9.0, 9.1, and 9.2 servers that are vulnerable to command-line flag injection through CVE-2013-1899. This can lead to denial of service, privilege escalation, or even arbitrary code execution.

msf > use auxiliary/scanner/postgres/postgres_dbname_flag_injection
msf auxiliary(postgres_dbname_flag_injection) > show actions
    ...actions...
msf auxiliary(postgres_dbname_flag_injection) > set ACTION < action-name >
msf auxiliary(postgres_dbname_flag_injection) > show options
    ...show and set options...
msf auxiliary(postgres_dbname_flag_injection) > run

Patch time for PostgreSQL

The Register • Richard Chirgwin • 04 Apr 2013

Crashable and hackable

The maintainers of the PostgreSQL database have released an urgent patch to cope with a vulnerability that allows remote users to crash servers, while authenticated users can execute arbitrary code. It's time for admins to get busy: the Shodan tool identifies around 170,000 servers that are visible from the Internet, here. As the advisory CVE-2013-1899 notes, an argument injection vulnerability “allows remote attackers to cause a denial of service (file corruption), and allows remote authentic...

CVE-2013-1899

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Metasploit Modules

Recent Articles

References

Vulmon Search

About

Products

Connect