Detections
Analytics
PostgreSQL < 7.2.3 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 1892
Synopsis
The remote host is vulnerable to a flaw which allows for the bypassing of authentication.Description
The remote PostgreSQL server is vulnerable to various flaws which may allow an attacker who has the right to query the remote database to obtain a shell on this host.Solution
Upgrade to PostgreSQL 7.2.3 or higher.Plugin Details
Severity: Medium
ID: 1892
Family: Database
Published: 8/20/2004
Updated: 3/6/2019
Nessus ID: 11456
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 4.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 6.3
Temporal Score: 5.5
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:postgresql:postgresql
Reference Information
CVE: CVE-2002-0972, CVE-2002-1397, CVE-2002-1398, CVE-2002-1399, CVE-2002-1400, CVE-2002-1401, CVE-2002-1402