CVE-2013-1899: Code Injection
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1899?
CVE-2013-1899 has a severity rating that indicates it can lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2013-1899?
To fix CVE-2013-1899, upgrade PostgreSQL to version 9.2.4 or later, 9.1.9 or later, or 9.0.13 or later.
What software is affected by CVE-2013-1899?
CVE-2013-1899 affects PostgreSQL versions 9.0.x, 9.1.x, and 9.2.x prior to their respective patched versions.
Can remote attackers exploit CVE-2013-1899?
Yes, CVE-2013-1899 allows remote attackers to cause denial of service or modify settings if they gain access.
What are the consequences of CVE-2013-1899?
Consequences of CVE-2013-1899 include file corruption, denial of service, and the ability for authenticated users to execute arbitrary code.