CVE-2012-3489
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.1%
The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.
Produtos afetados
n/a · n/aReferências
http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.htmlhttp://lists.opensuse.org/opensuse-updates/2012-09/msg00102.htmlhttp://lists.opensuse.org/opensuse-updates/2012-10/msg00013.htmlhttp://lists.opensuse.org/opensuse-updates/2012-10/msg00024.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1263.htmlhttps://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_postgresql2https://bugzilla.redhat.com/show_bug.cgi?id=849173http://secunia.com/advisories/50635http://secunia.com/advisories/50718http://secunia.com/advisories/50859http://secunia.com/advisories/50946http://www.debian.org/security/2012/dsa-2534