Description

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Remediation

References

CVE-2009-3231

Related Vulnerabilities

WordPress Plugin WP Symposium A Social Network For WordPress Multiple Cross-Site Scripting Vulnerabilities (12.07.07)

Python Integer Overflow or Wraparound Vulnerability (CVE-2016-9063)

Lodash Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2020-8203)

Seo Panel Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-22646)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Security Bypass (4.2.12)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-287 CVE-2009-3231