Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.891051
Category:Debian Local Security Checks
Title:Debian LTS: Security Advisory for postgresql-9.1 (DLA-1051-1)
Summary:Several vulnerabilities have been found in the PostgreSQL database;system:;;CVE-2017-7486;;Andrew Wheelwright discovered that user mappings were insufficiently;restricted.;;CVE-2017-7546;;In some authentication methods empty passwords were accepted.;;CVE-2017-7547;;User mappings could leak data to unprivileged users.
Description:Summary:
Several vulnerabilities have been found in the PostgreSQL database
system:

CVE-2017-7486

Andrew Wheelwright discovered that user mappings were insufficiently
restricted.

CVE-2017-7546

In some authentication methods empty passwords were accepted.

CVE-2017-7547

User mappings could leak data to unprivileged users.

Affected Software/OS:
postgresql-9.1 on Debian Linux

Solution:
For Debian 7 'Wheezy', these problems have been fixed in version
9.1.24lts2-0+deb7u1.

We recommend that you upgrade your postgresql-9.1 packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-7486
BugTraq ID: 98460
http://www.securityfocus.com/bid/98460
Debian Security Information: DSA-3851 (Google Search)
http://www.debian.org/security/2017/dsa-3851
https://security.gentoo.org/glsa/201710-06
RedHat Security Advisories: RHSA-2017:1677
https://access.redhat.com/errata/RHSA-2017:1677
RedHat Security Advisories: RHSA-2017:1678
https://access.redhat.com/errata/RHSA-2017:1678
RedHat Security Advisories: RHSA-2017:1838
https://access.redhat.com/errata/RHSA-2017:1838
RedHat Security Advisories: RHSA-2017:1983
https://access.redhat.com/errata/RHSA-2017:1983
RedHat Security Advisories: RHSA-2017:2425
https://access.redhat.com/errata/RHSA-2017:2425
http://www.securitytracker.com/id/1038476
Common Vulnerability Exposure (CVE) ID: CVE-2017-7546
BugTraq ID: 100278
http://www.securityfocus.com/bid/100278
Debian Security Information: DSA-3935 (Google Search)
http://www.debian.org/security/2017/dsa-3935
Debian Security Information: DSA-3936 (Google Search)
http://www.debian.org/security/2017/dsa-3936
RedHat Security Advisories: RHSA-2017:2677
https://access.redhat.com/errata/RHSA-2017:2677
RedHat Security Advisories: RHSA-2017:2678
https://access.redhat.com/errata/RHSA-2017:2678
RedHat Security Advisories: RHSA-2017:2728
https://access.redhat.com/errata/RHSA-2017:2728
RedHat Security Advisories: RHSA-2017:2860
https://access.redhat.com/errata/RHSA-2017:2860
http://www.securitytracker.com/id/1039142
Common Vulnerability Exposure (CVE) ID: CVE-2017-7547
BugTraq ID: 100275
http://www.securityfocus.com/bid/100275
CopyrightCopyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.