Description

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.

Remediation

References

CVE-2012-0867

Related Vulnerabilities

WordPress Plugin Responsive Slider-Image Slider-Slideshow for WordPress SQL Injection (2.8.6)

MySQL CVE-2014-2444 Vulnerability (CVE-2014-2444)

Oracle JRE CVE-2012-5083 Vulnerability (CVE-2012-5083)

WordPress 4.4.x PHP Object Injection (4.4 - 4.4.24)

Drupal Core 7.x Open Redirect (7.0 - 7.69)

Severity

Medium

Classification

CVE-2012-0867 CWE-295

Tags

Missing Update Known Vulnerabilities