Back to search
CVE-2009-3231
Published: Sep 17, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2009-9474
vendor-advisory
x_refsource_FEDORA
http://www.postgresql.org/docs/8.3/static/release-8-3-8.html
x_refsource_CONFIRM
36314
vdb-entry
x_refsource_BID
HPSBMU02781
vendor-advisory
x_refsource_HP
36837
third-party-advisory
x_refsource_SECUNIA
http://www.postgresql.org/support/security.html
x_refsource_CONFIRM
36660
third-party-advisory
x_refsource_SECUNIA
20100307 rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server
mailing-list
x_refsource_BUGTRAQ
36800
third-party-advisory
x_refsource_SECUNIA
DSA-1900
vendor-advisory
x_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=522084
x_refsource_CONFIRM
FEDORA-2009-9473
vendor-advisory
x_refsource_FEDORA
SUSE-SR:2009:016
vendor-advisory
x_refsource_SUSE
36727
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2009:017
vendor-advisory
x_refsource_SUSE
USN-834-1
vendor-advisory
x_refsource_UBUNTU
SSRT100617
vendor-advisory
x_refsource_HP
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now