CVE-2013-1899
- State
- Published
- Severity
- Not scored
- Published
- Apr 4, 2013
- Updated
- Aug 6, 2024
- Reserved
- Feb 19, 2013
Description
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.postgresql.org/docs/current/static/release-9-2-4.html
- http://www.postgresql.org/about/news/1456/
- openSUSE-SU-2013:0628vendor-advisory
- openSUSE-SU-2013:0635vendor-advisory
- http://www.postgresql.org/support/security/faq/2013-04-04/
- MDVSA-2013:142vendor-advisory
- http://support.apple.com/kb/HT5892
- http://www.postgresql.org/docs/current/static/release-9-0-13.html
- USN-1789-1vendor-advisory
- APPLE-SA-2013-09-12-1vendor-advisory
- FEDORA-2013-6148vendor-advisory
- APPLE-SA-2013-09-17-1vendor-advisory
- http://www.postgresql.org/docs/current/static/release-9-1-9.html
- SUSE-SU-2013:0633vendor-advisory
- DSA-2658vendor-advisory
- openSUSE-SU-2013:0627vendor-advisory
- FEDORA-2013-5000vendor-advisory
- http://support.apple.com/kb/HT5880
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.