CVE-2012-3488 | BDVDB-2026-52767 Detail
Description#
The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://rhn.redhat.com/errata/RHSA-2012-1263.html
- http://www.postgresql.org/docs/9.0/static/release-9-0-9.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:139
- http://secunia.com/advisories/50636
- https://bugzilla.redhat.com/show_bug.cgi?id=849172
- http://www.ubuntu.com/usn/USN-1542-1
- http://secunia.com/advisories/50718
- http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
- https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_postgresql2
- http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
- http://www.postgresql.org/docs/8.3/static/release-8-3-20.html
- http://www.postgresql.org/about/news/1407/
- http://secunia.com/advisories/50635
- http://www.postgresql.org/support/security/
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
Show all 24
- http://secunia.com/advisories/50946
- http://www.securityfocus.com/bid/55072
- http://www.debian.org/security/2012/dsa-2534
- http://rhn.redhat.com/errata/RHSA-2012-1264.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html
- http://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html
- http://secunia.com/advisories/50859
- http://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.