CVE-2012-0867

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.postgresql.org/docs/8.4/static/release-8-4-11.html	Release Notes Vendor Advisory
http://www.postgresql.org/docs/9.0/static/release-9-0-7.html	Release Notes Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-0678.html	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:026	Broken Link
http://www.postgresql.org/about/news/1377/	Vendor Advisory
http://www.debian.org/security/2012/dsa-2418	Third Party Advisory
http://www.postgresql.org/docs/9.1/static/release-9-1-3.html	Release Notes Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html	Third Party Advisory
http://secunia.com/advisories/49273

Configurations

Configuration 1 (hide)

cpe:2.3:o:opensuse_project:opensuse:12.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:a:postgresql:postgresql:8.4:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.10:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.8:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.9:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.2:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.1:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.3:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.4:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.5:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.6:::::::*
	cpe:2.3:a:postgresql:postgresql:8.4.7:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:postgresql:postgresql:9.0:::::::*
	cpe:2.3:a:postgresql:postgresql:9.0.1:::::::*
	cpe:2.3:a:postgresql:postgresql:9.0.2:::::::*
	cpe:2.3:a:postgresql:postgresql:9.0.3:::::::*
	cpe:2.3:a:postgresql:postgresql:9.0.5:::::::*
	cpe:2.3:a:postgresql:postgresql:9.0.4:::::::*
	cpe:2.3:a:postgresql:postgresql:9.0.6:::::::*

Configuration 4 (hide)

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR	cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*
	cpe:2.3:o:redhat:desktop_workstation:5:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2.z:::::::*
	cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:::::::*

Configuration 6 (hide)

OR	cpe:2.3:a:postgresql:postgresql:9.1:::::::*
	cpe:2.3:a:postgresql:postgresql:9.1.2:::::::*
	cpe:2.3:a:postgresql:postgresql:9.1.1:::::::*

Information

Published : 2012-07-18 16:55

Updated : 2016-12-07 11:56

NVD link : CVE-2012-0867

Mitre link : CVE-2012-0867

JSON object : View

CWE

CWE-295

Improper Certificate Validation

CWE-20

Improper Input Validation

Products Affected

redhat

enterprise_linux_desktop
enterprise_linux_hpc_node
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_eus
enterprise_linux_server
desktop_workstation

opensuse_project

opensuse

postgresql

postgresql

debian

debian_linux

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.postgresql.org/docs/8.4/static/release-8-4-11.html", "name": "http://www.postgresql.org/docs/8.4/static/release-8-4-11.html", "tags": ["Release Notes", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.postgresql.org/docs/9.0/static/release-9-0-7.html", "name": "http://www.postgresql.org/docs/9.0/static/release-9-0-7.html", "tags": ["Release Notes", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-0678.html", "name": "RHSA-2012:0678", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:026", "name": "MDVSA-2012:026", "tags": ["Broken Link"], "refsource": "MANDRIVA"}, {"url": "http://www.postgresql.org/about/news/1377/", "name": "http://www.postgresql.org/about/news/1377/", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.debian.org/security/2012/dsa-2418", "name": "DSA-2418", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://www.postgresql.org/docs/9.1/static/release-9-1-3.html", "name": "http://www.postgresql.org/docs/9.1/static/release-9-1-3.html", "tags": ["Release Notes", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html", "name": "openSUSE-SU-2012:1173", "tags": ["Third Party Advisory"], "refsource": "SUSE"}, {"url": "http://secunia.com/advisories/49273", "name": "49273", "tags": [], "refsource": "SECUNIA"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-295"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2012-0867", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-07-18T23:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:opensuse_project:opensuse:12.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:8.4.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.0.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:desktop_workstation:5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2.z:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-12-07T19:56Z"}

4.3 /10