CVE-2013-1899

PostgreSQL Database Name Command Line Flag Injection

Title source: metasploit

Description

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).

Exploits (1)

metasploit SCANNER

by hdm · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/postgres/postgres_dbname_flag_injection.rb

View Code ZIP pw:eip

References (18)

[Mailing List] http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

[Mailing List] http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html

[Vendor Advisory] http://support.apple.com/kb/HT5880

[Vendor Advisory] http://support.apple.com/kb/HT5892

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2013:142

[Vendor Advisory] http://www.postgresql.org/about/news/1456/

[Various Sources] http://www.postgresql.org/docs/current/static/release-9-0-13.html

[Various Sources] http://www.postgresql.org/docs/current/static/release-9-1-9.html

[Various Sources] http://www.postgresql.org/docs/current/static/release-9-2-4.html

[Vendor Advisory] http://www.postgresql.org/support/security/faq/2013-04-04/

[Vendor Advisory] http://www.ubuntu.com/usn/USN-1789-1

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html

[Third Party Advisory] http://www.debian.org/security/2013/dsa-2658

Scores

EPSS 0.8112

EPSS Percentile 99.2%

Details

CWE

CWE-94

Status published

Products (31)

canonical/ubuntu_linux 8.04

canonical/ubuntu_linux 10.04

canonical/ubuntu_linux 11.10

canonical/ubuntu_linux 12.04

canonical/ubuntu_linux 12.10

postgresql/postgresql 9.2

postgresql/postgresql 9.2.1

postgresql/postgresql 9.2.2

postgresql/postgresql 9.2.3

postgresql/postgresql 9.1

... and 21 more

Published Apr 04, 2013

Tracked Since Feb 18, 2026