CVE-2013-1903: Critical severity postgresql common vulnerability

Published Apr 4, 2013

Updated

PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors.

Affected Software

66 affected components

PostgreSQL postgresql=9.2

PostgreSQL postgresql=9.2.1

PostgreSQL postgresql=9.2.2

PostgreSQL postgresql=9.2.3

PostgreSQL postgresql=9.1

PostgreSQL postgresql=9.1.1

PostgreSQL postgresql=9.1.2

PostgreSQL postgresql=9.1.3

PostgreSQL postgresql=9.1.4

PostgreSQL postgresql=9.1.5

PostgreSQL postgresql=9.1.6

PostgreSQL postgresql=9.1.7

PostgreSQL postgresql=9.1.8

PostgreSQL postgresql=9.0

PostgreSQL postgresql=9.0.1

PostgreSQL postgresql=9.0.2

PostgreSQL postgresql=9.0.3

PostgreSQL postgresql=9.0.4

PostgreSQL postgresql=9.0.5

PostgreSQL postgresql=9.0.6

PostgreSQL postgresql=9.0.7

PostgreSQL postgresql=9.0.8

PostgreSQL postgresql=9.0.9

PostgreSQL postgresql=9.0.10

PostgreSQL postgresql=9.0.11

PostgreSQL postgresql=9.0.12

PostgreSQL postgresql=8.4

PostgreSQL postgresql=8.4.1

PostgreSQL postgresql=8.4.2

PostgreSQL postgresql=8.4.3

PostgreSQL postgresql=8.4.4

PostgreSQL postgresql=8.4.5

PostgreSQL postgresql=8.4.6

PostgreSQL postgresql=8.4.7

PostgreSQL postgresql=8.4.8

PostgreSQL postgresql=8.4.9

PostgreSQL postgresql=8.4.10

PostgreSQL postgresql=8.4.11

PostgreSQL postgresql=8.4.12

PostgreSQL postgresql=8.4.13

PostgreSQL postgresql=8.4.14

PostgreSQL postgresql=8.4.15

PostgreSQL postgresql=8.4.16

PostgreSQL postgresql=8.3

PostgreSQL postgresql=8.3.1

PostgreSQL postgresql=8.3.2

PostgreSQL postgresql=8.3.3

PostgreSQL postgresql=8.3.4

PostgreSQL postgresql=8.3.5

PostgreSQL postgresql=8.3.6

PostgreSQL postgresql=8.3.7

PostgreSQL postgresql=8.3.8

PostgreSQL postgresql=8.3.9

PostgreSQL postgresql=8.3.10

PostgreSQL postgresql=8.3.11

PostgreSQL postgresql=8.3.12

PostgreSQL postgresql=8.3.13

PostgreSQL postgresql=8.3.14

PostgreSQL postgresql=8.3.15

PostgreSQL postgresql=8.3.16

PostgreSQL postgresql=8.3.17

PostgreSQL postgresql=8.3.18

PostgreSQL postgresql=8.3.19

PostgreSQL postgresql=8.3.20

PostgreSQL postgresql=8.3.21

PostgreSQL postgresql=8.3.22

Event History

Apr 4, 2013

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1903?

The severity of CVE-2013-1903 is considered moderate due to the potential exposure of the superuser password.

How do I fix CVE-2013-1903?

To fix CVE-2013-1903, you should upgrade to PostgreSQL version 9.2.4 or later, 9.1.9 or later, 9.0.13 or later, 8.4.17 or later, or 8.3.23 or later.

Which PostgreSQL versions are affected by CVE-2013-1903?

CVE-2013-1903 affects PostgreSQL versions 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23.

What impact does CVE-2013-1903 have?

CVE-2013-1903 may allow unauthorized access to sensitive database functionalities as the superuser password might be exposed.

Are there any known exploit methods for CVE-2013-1903?

As of now, CVE-2013-1903 has unspecified attack vectors, indicating it may not have publicly known exploits.