CVE-2009-3231
Fixed in a distro release EPSS 8%
The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.
Products: postgresql, opensuse, suse linux_enterprise, suse linux_enterprise_server, fedoraproject fedora, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | postgresql-7.4 | 1:7.4.26-0etch1 |
| Debian 4.0 | postgresql-8.1 | 8.1.18-0etch1 |
| Debian 5.0 | postgresql-8.3 | 8.3.8-0lenny1 |
| Red Hat rhel application stack 2 | httpd | 0:2.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | httpd-debuginfo | 0:2.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | httpd-devel | 0:2.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | httpd-manual | 0:2.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | mod_ssl | 1:2.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | mysql | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-bench | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-cluster | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-debuginfo | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-devel | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-libs | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-server | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-test | 0:5.0.84-2.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-MySQL | 0:4.012-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-MySQL-debuginfo | 0:4.012-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBI | 0:1.609-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBI-debuginfo | 0:1.609-1.el5s2 |
| Red Hat rhel application stack 2 | php | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-bcmath | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-cli | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-common | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-dba | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-debuginfo | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-devel | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-gd | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-imap | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-ldap | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-mbstring | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-mysql | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-ncurses | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-odbc | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-pdo | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-pear | 1:1.8.1-2.el5s2 |
| Red Hat rhel application stack 2 | php-pgsql | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-snmp | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-soap | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-xml | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | php-xmlrpc | 0:5.2.10-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-contrib | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-debuginfo | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-devel | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-docs | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-jdbc | 0:8.2.510-1jpp.el5s2 |
| Red Hat rhel application stack 2 | postgresql-jdbc-debuginfo | 0:8.2.510-1jpp.el5s2 |
| Red Hat rhel application stack 2 | postgresql-libs | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-plperl | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-plpython | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-pltcl | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-python | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-server | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-tcl | 0:8.2.14-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-test | 0:8.2.14-1.el5s2 |