Description

The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP to download software.

Remediation

References

CVE-2016-7048

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5012)

WordPress Plugin Easy Testimonials Cross-Site Scripting (3.0.4)

Oracle Database Server CVE-2014-4296 Vulnerability (CVE-2014-4296)

Oracle Application Server CVE-2009-1017 Vulnerability (CVE-2009-1017)

WordPress Plugin Creative Contact Form-The Best WordPress Contact Form Builder Arbitrary File Upload (0.9.7)

Severity

High

Classification

CVE-2016-7048 CWE-284 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities