The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0678 advisory.

    PostgreSQL is an advanced object-relational database management system     (DBMS).

    The pg_dump utility inserted object names literally into comments in the     SQL script it produces. An unprivileged database user could create an     object whose name includes a newline followed by an SQL command. This SQL     command might then be executed by a privileged user during later restore of     the backup dump, allowing privilege escalation. (CVE-2012-0868)

    When configured to do SSL certificate verification, PostgreSQL only checked     the first 31 characters of the certificate's Common Name field. Depending     on the configuration, this could allow an attacker to impersonate a server     or a client using a certificate from a trusted Certificate Authority issued     for a different name. (CVE-2012-0867)

    CREATE TRIGGER did not do a permissions check on the trigger function to     be called. This could possibly allow an authenticated database user to     call a privileged trigger function on data of their choosing.
    (CVE-2012-0866)

    These updated packages upgrade PostgreSQL to version 8.4.11, which fixes     these issues as well as several data-corruption issues and lesser     non-security issues. Refer to the PostgreSQL Release Notes for a full list     of changes:

    http://www.postgresql.org/docs/8.4/static/release.html

    All PostgreSQL users are advised to upgrade to these updated packages,     which correct these issues. If the postgresql service is running, it will     be automatically restarted after installing this update.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2012:0678)

critical Nessus Plugin ID 59223

Version 1.27

Version 1.26

Version 1.27 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411051250
Version 1.26 Apr 27, 2024, 10:42 PM CVSS metrics ("CVSSv3 score" set to 10.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2012-0868") Detection (updated detection logic) Plugin metadata Plugin Feed: 202404272242