CVE

Id
41469  
CVE No.
CVE-2009-4034  
Status
Candidate  
Description
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a "" character in a domain name in the subject"s Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455738 41469 CVE-2009-4034 BUGTRAQ:20100307 rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server  View
455739 41469 CVE-2009-4034 URL:http://www.securityfocus.com/archive/1/archive/1/509917/100/0/threaded  View
455740 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/docs/current/static/release-7-4-27.html  View
455741 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-0-23.html  View
455742 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-1-19.html  View
455743 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-2-15.html  View
455744 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-3-9.html  View
455745 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/docs/current/static/release-8-4-2.html  View
455746 41469 CVE-2009-4034 CONFIRM:http://www.postgresql.org/support/security.html  View
455747 41469 CVE-2009-4034 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012  View
455748 41469 CVE-2009-4034 FEDORA:FEDORA-2009-13363  View
455749 41469 CVE-2009-4034 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html  View
455750 41469 CVE-2009-4034 FEDORA:FEDORA-2009-13381  View
455751 41469 CVE-2009-4034 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html  View
455752 41469 CVE-2009-4034 HP:HPSBMU02781  View
455753 41469 CVE-2009-4034 URL:http://marc.info/?l=bugtraq&m=134124585221119&w=2  View
455754 41469 CVE-2009-4034 HP:SSRT100617  View
455755 41469 CVE-2009-4034 URL:http://marc.info/?l=bugtraq&m=134124585221119&w=2  View
455756 41469 CVE-2009-4034 MANDRIVA:MDVSA-2009:333  View
455757 41469 CVE-2009-4034 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:333  View
455758 41469 CVE-2009-4034 SUSE:SUSE-SR:2010:001  View
455759 41469 CVE-2009-4034 URL:http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html  View
455760 41469 CVE-2009-4034 BID:37334  View
455761 41469 CVE-2009-4034 URL:http://www.securityfocus.com/bid/37334  View
455762 41469 CVE-2009-4034 OSVDB:61038  View
455763 41469 CVE-2009-4034 URL:http://osvdb.org/61038  View
455764 41469 CVE-2009-4034 SECTRACK:1023325  View
455765 41469 CVE-2009-4034 URL:http://www.securitytracker.com/id?1023325  View
455766 41469 CVE-2009-4034 SECUNIA:37663  View
455767 41469 CVE-2009-4034 URL:http://secunia.com/advisories/37663  View
455768 41469 CVE-2009-4034 VUPEN:ADV-2009-3519  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44129 JVNDB-2009-005136 NCH Software Axon Virtual PBX におけるクロスサイトスクリプティングの脆弱性 NCH Software Axon Virtual PBX には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4038 41469 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005136.html  View