Signature Detail

DB: PostgreSQL Database Name Command-line Flag Injection

This signature detects attempts to exploit a known vulnerability against PostgreSQL. A successful attack can allow an attacker to gain elevated privileges, cause a denial of service condition or execute arbitrary code on the targeted system.

Extended Description

Per http://www.ubuntu.com/usn/USN-1789-1/ "A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10 Ubuntu 12.04 LTS Ubuntu 11.10 Ubuntu 10.04 LTS Ubuntu 8.04 LTS"

Affected Products

• Canonical ubuntu_linux 10.04
• Canonical ubuntu_linux 11.10
• Canonical ubuntu_linux 12.04
• Canonical ubuntu_linux 12.10
• Canonical ubuntu_linux 8.04
• Postgresql postgresql 9.0
• Postgresql postgresql 9.0.1
• Postgresql postgresql 9.0.10
• Postgresql postgresql 9.0.11
• Postgresql postgresql 9.0.12
• Postgresql postgresql 9.0.2
• Postgresql postgresql 9.0.3
• Postgresql postgresql 9.0.4
• Postgresql postgresql 9.0.5
• Postgresql postgresql 9.0.6
• Postgresql postgresql 9.0.7
• Postgresql postgresql 9.0.8
• Postgresql postgresql 9.0.9
• Postgresql postgresql 9.1
• Postgresql postgresql 9.1.1
• Postgresql postgresql 9.1.2
• Postgresql postgresql 9.1.3
• Postgresql postgresql 9.1.4
• Postgresql postgresql 9.1.5
• Postgresql postgresql 9.1.6
• Postgresql postgresql 9.1.7
• Postgresql postgresql 9.1.8
• Postgresql postgresql 9.2
• Postgresql postgresql 9.2.1
• Postgresql postgresql 9.2.2
• Postgresql postgresql 9.2.3

References

• BugTraq: 58876
• CVE: CVE-2013-1899