// For flags

CVE-2009-4034

 

Severity Score

5.9
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

PostgreSQL v7.4.x anteriores a v7.4.27, v8.0.x anteriores a v8.0.23, v8.1.x anteriores a v8.1.19, v8.2.x anteriores a v8.2.15, v8.3.x anteriores a v8.3.9, y v8.4.x anteriores a v8.4.2 no maneja adecuadamente un caracter '/0' en el nombre de dominio en el campo "subject" del Nombre Común (CN) de un certificado X.509, lo que permite (1) a atacantes man-in-the-middle falsificar a conveniencia los servidores PostgreSQL basados en SSL a través de un certificado de servidor manipulado obtenido a través de una autoridad certificadora legitima, y (2)permite a atacantes remotos evitar las restricciones cliente-hostname a través de un certificado manipulado obtenido a través de una autoridad certificadora legitima, un asunto relacionado con CVE-2009-2408.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-11-20 CVE Reserved
  • 2009-12-15 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-310: Cryptographic Issues
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.1
Search vendor "Postgresql" for product "Postgresql" and version "7.4.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.2
Search vendor "Postgresql" for product "Postgresql" and version "7.4.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.3
Search vendor "Postgresql" for product "Postgresql" and version "7.4.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.4
Search vendor "Postgresql" for product "Postgresql" and version "7.4.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.5
Search vendor "Postgresql" for product "Postgresql" and version "7.4.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.6
Search vendor "Postgresql" for product "Postgresql" and version "7.4.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.7
Search vendor "Postgresql" for product "Postgresql" and version "7.4.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.8
Search vendor "Postgresql" for product "Postgresql" and version "7.4.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.9
Search vendor "Postgresql" for product "Postgresql" and version "7.4.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.10
Search vendor "Postgresql" for product "Postgresql" and version "7.4.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.11
Search vendor "Postgresql" for product "Postgresql" and version "7.4.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.12
Search vendor "Postgresql" for product "Postgresql" and version "7.4.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.13
Search vendor "Postgresql" for product "Postgresql" and version "7.4.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.14
Search vendor "Postgresql" for product "Postgresql" and version "7.4.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.15
Search vendor "Postgresql" for product "Postgresql" and version "7.4.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.16
Search vendor "Postgresql" for product "Postgresql" and version "7.4.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.17
Search vendor "Postgresql" for product "Postgresql" and version "7.4.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.18
Search vendor "Postgresql" for product "Postgresql" and version "7.4.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.19
Search vendor "Postgresql" for product "Postgresql" and version "7.4.19"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.20
Search vendor "Postgresql" for product "Postgresql" and version "7.4.20"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.21
Search vendor "Postgresql" for product "Postgresql" and version "7.4.21"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.22
Search vendor "Postgresql" for product "Postgresql" and version "7.4.22"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.23
Search vendor "Postgresql" for product "Postgresql" and version "7.4.23"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.24
Search vendor "Postgresql" for product "Postgresql" and version "7.4.24"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.25
Search vendor "Postgresql" for product "Postgresql" and version "7.4.25"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
7.4.26
Search vendor "Postgresql" for product "Postgresql" and version "7.4.26"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.0
Search vendor "Postgresql" for product "Postgresql" and version "8.0.0"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.1
Search vendor "Postgresql" for product "Postgresql" and version "8.0.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.2
Search vendor "Postgresql" for product "Postgresql" and version "8.0.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.3
Search vendor "Postgresql" for product "Postgresql" and version "8.0.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.4
Search vendor "Postgresql" for product "Postgresql" and version "8.0.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.5
Search vendor "Postgresql" for product "Postgresql" and version "8.0.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.6
Search vendor "Postgresql" for product "Postgresql" and version "8.0.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.7
Search vendor "Postgresql" for product "Postgresql" and version "8.0.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.8
Search vendor "Postgresql" for product "Postgresql" and version "8.0.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.9
Search vendor "Postgresql" for product "Postgresql" and version "8.0.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.10
Search vendor "Postgresql" for product "Postgresql" and version "8.0.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.11
Search vendor "Postgresql" for product "Postgresql" and version "8.0.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.12
Search vendor "Postgresql" for product "Postgresql" and version "8.0.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.13
Search vendor "Postgresql" for product "Postgresql" and version "8.0.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.14
Search vendor "Postgresql" for product "Postgresql" and version "8.0.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.15
Search vendor "Postgresql" for product "Postgresql" and version "8.0.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.16
Search vendor "Postgresql" for product "Postgresql" and version "8.0.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.17
Search vendor "Postgresql" for product "Postgresql" and version "8.0.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.18
Search vendor "Postgresql" for product "Postgresql" and version "8.0.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.19
Search vendor "Postgresql" for product "Postgresql" and version "8.0.19"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.20
Search vendor "Postgresql" for product "Postgresql" and version "8.0.20"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.21
Search vendor "Postgresql" for product "Postgresql" and version "8.0.21"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.0.22
Search vendor "Postgresql" for product "Postgresql" and version "8.0.22"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.0
Search vendor "Postgresql" for product "Postgresql" and version "8.1.0"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.1
Search vendor "Postgresql" for product "Postgresql" and version "8.1.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.2
Search vendor "Postgresql" for product "Postgresql" and version "8.1.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.3
Search vendor "Postgresql" for product "Postgresql" and version "8.1.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.4
Search vendor "Postgresql" for product "Postgresql" and version "8.1.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.5
Search vendor "Postgresql" for product "Postgresql" and version "8.1.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.6
Search vendor "Postgresql" for product "Postgresql" and version "8.1.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.7
Search vendor "Postgresql" for product "Postgresql" and version "8.1.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.8
Search vendor "Postgresql" for product "Postgresql" and version "8.1.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.9
Search vendor "Postgresql" for product "Postgresql" and version "8.1.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.10
Search vendor "Postgresql" for product "Postgresql" and version "8.1.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.11
Search vendor "Postgresql" for product "Postgresql" and version "8.1.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.12
Search vendor "Postgresql" for product "Postgresql" and version "8.1.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.13
Search vendor "Postgresql" for product "Postgresql" and version "8.1.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.14
Search vendor "Postgresql" for product "Postgresql" and version "8.1.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.15
Search vendor "Postgresql" for product "Postgresql" and version "8.1.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.16
Search vendor "Postgresql" for product "Postgresql" and version "8.1.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.17
Search vendor "Postgresql" for product "Postgresql" and version "8.1.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.1.18
Search vendor "Postgresql" for product "Postgresql" and version "8.1.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2
Search vendor "Postgresql" for product "Postgresql" and version "8.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.1
Search vendor "Postgresql" for product "Postgresql" and version "8.2.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.2
Search vendor "Postgresql" for product "Postgresql" and version "8.2.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.3
Search vendor "Postgresql" for product "Postgresql" and version "8.2.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.4
Search vendor "Postgresql" for product "Postgresql" and version "8.2.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.5
Search vendor "Postgresql" for product "Postgresql" and version "8.2.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.6
Search vendor "Postgresql" for product "Postgresql" and version "8.2.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.7
Search vendor "Postgresql" for product "Postgresql" and version "8.2.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.8
Search vendor "Postgresql" for product "Postgresql" and version "8.2.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.9
Search vendor "Postgresql" for product "Postgresql" and version "8.2.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.10
Search vendor "Postgresql" for product "Postgresql" and version "8.2.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.11
Search vendor "Postgresql" for product "Postgresql" and version "8.2.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.12
Search vendor "Postgresql" for product "Postgresql" and version "8.2.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.13
Search vendor "Postgresql" for product "Postgresql" and version "8.2.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.2.14
Search vendor "Postgresql" for product "Postgresql" and version "8.2.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.1
Search vendor "Postgresql" for product "Postgresql" and version "8.3.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.2
Search vendor "Postgresql" for product "Postgresql" and version "8.3.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.3
Search vendor "Postgresql" for product "Postgresql" and version "8.3.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.4
Search vendor "Postgresql" for product "Postgresql" and version "8.3.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.5
Search vendor "Postgresql" for product "Postgresql" and version "8.3.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.6
Search vendor "Postgresql" for product "Postgresql" and version "8.3.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.7
Search vendor "Postgresql" for product "Postgresql" and version "8.3.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.8
Search vendor "Postgresql" for product "Postgresql" and version "8.3.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.1
Search vendor "Postgresql" for product "Postgresql" and version "8.4.1"
-
Affected