Description

PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors.

Remediation

References

CVE-2013-1903

Related Vulnerabilities

WordPress Plugin Great Restaurant Menu WP SQL Injection (1.4.1)

WordPress Plugin ApplyOnline-Application Form Builder and Manager Cross-Site Scripting (1.9.94)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3274)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9475)

Oracle Application Server Other Vulnerability (CVE-2001-1372)

Severity

Critical

Classification

CVE-2013-1903 CWE-264

Tags

Missing Update Known Vulnerabilities