CVE-2013-1899

PostgreSQL Database Name Command Line Flag Injection

Title source: metasploit

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-1899. PoCs published by hdm, including Metasploit module auxiliary/scanner/postgres/postgres_dbname_flag_injection.

AI-analyzed exploit summary This Metasploit module scans for PostgreSQL servers vulnerable to CVE-2013-1899 by injecting the '--help' flag into the database name field, triggering a response that reveals vulnerability status.

Description

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).

Exploits (1)

metasploit SCANNER

by hdm · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/postgres/postgres_dbname_flag_injection.rb

View Code ZIP pw:eip

This Metasploit module scans for PostgreSQL servers vulnerable to CVE-2013-1899 by injecting the '--help' flag into the database name field, triggering a response that reveals vulnerability status.

Classification

Scanner 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: PostgreSQL 9.0, 9.1, 9.2

No auth needed

Prerequisites: Network access to PostgreSQL port (default 5432)

MITRE ATT&CK

T1595 - Active Scanning

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (18)

Core 18

Core References

Various Sources x_refsource_confirm

http://www.postgresql.org/docs/current/static/release-9-2-4.html

Vendor Advisory x_refsource_confirm

http://www.postgresql.org/about/news/1456/

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html

Vendor Advisory x_refsource_confirm

http://www.postgresql.org/support/security/faq/2013-04-04/

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2013:142

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT5892

Various Sources x_refsource_confirm

http://www.postgresql.org/docs/current/static/release-9-0-13.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1789-1

Various Sources x_refsource_confirm

http://www.postgresql.org/docs/current/static/release-9-1-9.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT5880

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2013/dsa-2658

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html

Scores

EPSS 0.5431

EPSS Percentile 98.9%

Details

CWE

CWE-94

Status published

Products (31)

canonical/ubuntu_linux 8.04

canonical/ubuntu_linux 10.04

canonical/ubuntu_linux 11.10

canonical/ubuntu_linux 12.04

canonical/ubuntu_linux 12.10

postgresql/postgresql 9.2

postgresql/postgresql 9.2.1

postgresql/postgresql 9.2.2

postgresql/postgresql 9.2.3

postgresql/postgresql 9.1

... and 21 more

Published Apr 04, 2013

Tracked Since Feb 18, 2026