NVD

Id
38035  
Name
CVE-2013-1899  
Description
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-04  
Modified Date
2013-11-30  
Seq
2013-1899  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194295 38035 CVE-2013-1899 APPLE-SA-2013-09-12-1  View
194296 38035 CVE-2013-1899 APPLE-SA-2013-09-17-1  View
194297 38035 CVE-2013-1899 FEDORA-2013-5000  View
194298 38035 CVE-2013-1899 FEDORA-2013-6148  View
194299 38035 CVE-2013-1899 openSUSE-SU-2013:0627  View
194300 38035 CVE-2013-1899 openSUSE-SU-2013:0628  View
194301 38035 CVE-2013-1899 SUSE-SU-2013:0633  View
194302 38035 CVE-2013-1899 openSUSE-SU-2013:0635  View
194303 38035 CVE-2013-1899 http://support.apple.com/kb/HT5880  View
194304 38035 CVE-2013-1899 http://support.apple.com/kb/HT5892  View
194305 38035 CVE-2013-1899 DSA-2658  View
194306 38035 CVE-2013-1899 MDVSA-2013:142  View
194307 38035 CVE-2013-1899 http://www.postgresql.org/about/news/1456/  View
194308 38035 CVE-2013-1899 http://www.postgresql.org/docs/current/static/release-9-0-13.html  View
194309 38035 CVE-2013-1899 http://www.postgresql.org/docs/current/static/release-9-1-9.html  View
194310 38035 CVE-2013-1899 http://www.postgresql.org/docs/current/static/release-9-2-4.html  View
194311 38035 CVE-2013-1899 http://www.postgresql.org/support/security/faq/2013-04-04/  View
194312 38035 CVE-2013-1899 USN-1789-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20566 JVNDB-2013-002141 PostgreSQL におけるサービス運用妨害 (DoS) の脆弱性 PostgreSQL には、引数の挿入により、サービス運用妨害 (ファイルの破損) 状態にされる、構成設定を変更される、および任意のコードを実行される脆弱性が存在します。 CVE-2013-1899 61841 CVE-2013-1899 38035 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002141.html 2013-04-04 2013-12-05 View