CVE-2012-0867 in PostgreSQLinfo

Zusammenfassung (Englisch)

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservieren

19.01.2012

Veröffentlichung

18.07.2012

Einträge

1

CPE

bereit

CVSS

6.8

EPSS

0.01866

Quellen

Interested in the pricing of exploits?

See the underground prices here!