Description

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).

Remediation

References

CVE-2013-1899

Related Vulnerabilities

WordPress Plugin EWWW Image Optimizer Remote Code Execution (2.8.3)

WordPress 4.2.2 Multiple Vulnerabilities (0.7 - 4.2.2)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.13)

Ruby Numeric Errors Vulnerability (CVE-2008-2726)

WordPress Plugin WP e-Commerce-Store Exporter Privilege Escalation (1.6.6)

Severity

Medium

Classification

CVE-2013-1899 CWE-94

Tags

Missing Update Known Vulnerabilities