CVE-2012-1618
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement parameters, which allows remote attackers to perform SQL injection attacks. NOTE: as of 20120330, it was claimed that the upstream developer planned to dispute this issue, but an official dispute has not been posted as of 20121005.
Error de interacción en el controlador PostgreSQL JDBC anteriores a v8.2, cuando se usa con el servidor PostgreSQL con la opción "standard_conforming_strings" activa, como la configuración por defecto de PostgreSQL v9.1, no "escapa" de forma adecuada parámetros JDBC de declaración, lo que permite a atacantes remotos a efectuar ataques de inyección SQL. NOTA: se afirmó que el desarrollador original planeaba discutir ese punto, pero una disputa oficial no ha sido publicada a partir de 20121005.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2012-03-12 CVE Reserved
- 2012-10-06 CVE Published
- 2023-04-24 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2012-03/0126.html | Mailing List | |
| http://lists.opensuse.org/opensuse-security/2012-03/msg00024.html | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/03/30/8 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/03/30/9 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/03/31/1 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/04/02/4 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/04/04/11 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/04/04/4 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/04/04/5 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/04/04/9 | Mailing List |
|
| http://www.osvdb.org/80641 | Vdb Entry | |
| https://bugzilla.novell.com/show_bug.cgi?id=754273 | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Postgresql Search vendor "Postgresql" | Postgresql Search vendor "Postgresql" for product "Postgresql" | 9.1 Search vendor "Postgresql" for product "Postgresql" and version "9.1" | - |
Affected
| ||||||
| Postgresql Search vendor "Postgresql" | Postgresql Jdbc Driver Search vendor "Postgresql" for product "Postgresql Jdbc Driver" | 8.1 Search vendor "Postgresql" for product "Postgresql Jdbc Driver" and version "8.1" | - |
Affected
| ||||||