USN-1542-1 : postgresql-8.3, postgresql-8.4, postgresql-9.1 vulnerabilities

NASLDB: USN-1542-1 : postgresql-8.3, postgresql-8.4, postgresql-9.1 vulnerabilities

General

ID: 61607
Name: USN-1542-1 : postgresql-8.3, postgresql-8.4, postgresql-9.1 vulnerabilities

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

Peter Eisentraut discovered that the XSLT functionality in the
optional XML2 extension would allow unprivileged database users to
both read and write data with the privileges of the database server.
(CVE-2012-3488)

Noah Misch and Tom Lane discovered that the XML functionality in the
optional XML2 extension would allow unprivileged database users to
read data with the privileges of the database server. (CVE-2012-3489)