Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2009-4034

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

  • Published: Dec 15, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-4034
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:N/I:P/A:P

CWEs:

Software From Fixed in
postgresql / postgresql 7.4.16 7.4.16.x
postgresql / postgresql 8.1.10 8.1.10.x
postgresql / postgresql 8.1.6 8.1.6.x
postgresql / postgresql 8.2.9 8.2.9.x
postgresql / postgresql 8.0.7 8.0.7.x
postgresql / postgresql 8.0.2 8.0.2.x
postgresql / postgresql 8.1.15 8.1.15.x
postgresql / postgresql 8.1.7 8.1.7.x
postgresql / postgresql 8.3.6 8.3.6.x
postgresql / postgresql 8.4.1 8.4.1.x
postgresql / postgresql 8.2.10 8.2.10.x
postgresql / postgresql 8.0.22 8.0.22.x
postgresql / postgresql 7.4.24 7.4.24.x
postgresql / postgresql 8.2.4 8.2.4.x
postgresql / postgresql 7.4.22 7.4.22.x
postgresql / postgresql 7.4.21 7.4.21.x
postgresql / postgresql 8.0.17 8.0.17.x
postgresql / postgresql 8.0.10 8.0.10.x
postgresql / postgresql 7.4.19 7.4.19.x
postgresql / postgresql 8.2.11 8.2.11.x
postgresql / postgresql 8.1.13 8.1.13.x
postgresql / postgresql 8.0.12 8.0.12.x
postgresql / postgresql 8.2.12 8.2.12.x
postgresql / postgresql 7.4.15 7.4.15.x
postgresql / postgresql 8.0.9 8.0.9.x
postgresql / postgresql 8.0.15 8.0.15.x
postgresql / postgresql 7.4.1 7.4.1.x
postgresql / postgresql 8.2.2 8.2.2.x
postgresql / postgresql 8.3.3 8.3.3.x
postgresql / postgresql 8.0.0 8.0.0.x
postgresql / postgresql 8.1.0 8.1.0.x
postgresql / postgresql 8.1.3 8.1.3.x
postgresql / postgresql 7.4.14 7.4.14.x
postgresql / postgresql 7.4.26 7.4.26.x
postgresql / postgresql 7.4.6 7.4.6.x
postgresql / postgresql 8.3.2 8.3.2.x
postgresql / postgresql 7.4.23 7.4.23.x
postgresql / postgresql 7.4.11 7.4.11.x
postgresql / postgresql 8.0.18 8.0.18.x
postgresql / postgresql 8.2.5 8.2.5.x
postgresql / postgresql 8.0.3 8.0.3.x
postgresql / postgresql 7.4.7 7.4.7.x
postgresql / postgresql 8.1.9 8.1.9.x
postgresql / postgresql 7.4.17 7.4.17.x
postgresql / postgresql 7.4.3 7.4.3.x
postgresql / postgresql 8.2.1 8.2.1.x
postgresql / postgresql 8.3.1 8.3.1.x
postgresql / postgresql 8.1.14 8.1.14.x
postgresql / postgresql 7.4.25 7.4.25.x
postgresql / postgresql 7.4.9 7.4.9.x
postgresql / postgresql 7.4.5 7.4.5.x
postgresql / postgresql 7.4.18 7.4.18.x
postgresql / postgresql 8.3.5 8.3.5.x
postgresql / postgresql 8.0.20 8.0.20.x
postgresql / postgresql 8.3.8 8.3.8.x
postgresql / postgresql 8.0.8 8.0.8.x
postgresql / postgresql 7.4.8 7.4.8.x
postgresql / postgresql 8.2.7 8.2.7.x
postgresql / postgresql 8.0.6 8.0.6.x
postgresql / postgresql 8.1.11 8.1.11.x
postgresql / postgresql 8.2.6 8.2.6.x
postgresql / postgresql 7.4.4 7.4.4.x
postgresql / postgresql 8.0.16 8.0.16.x
postgresql / postgresql 8.3.7 8.3.7.x
postgresql / postgresql 8.1.17 8.1.17.x
postgresql / postgresql 8.0.13 8.0.13.x
postgresql / postgresql 8.1.18 8.1.18.x
postgresql / postgresql 8.1.4 8.1.4.x
postgresql / postgresql 8.0.1 8.0.1.x
postgresql / postgresql 8.1.8 8.1.8.x
postgresql / postgresql 8.3.4 8.3.4.x
postgresql / postgresql 7.4.12 7.4.12.x
postgresql / postgresql 8.0.19 8.0.19.x
postgresql / postgresql 8.1.1 8.1.1.x
postgresql / postgresql 8.1.12 8.1.12.x
postgresql / postgresql 8.1.5 8.1.5.x
postgresql / postgresql 8.0.21 8.0.21.x
postgresql / postgresql 7.4.10 7.4.10.x
postgresql / postgresql 8.1.16 8.1.16.x
postgresql / postgresql 8.2.3 8.2.3.x
postgresql / postgresql 8.0.4 8.0.4.x
postgresql / postgresql 8.0.5 8.0.5.x
postgresql / postgresql 7.4.20 7.4.20.x
postgresql / postgresql 8.0.14 8.0.14.x
postgresql / postgresql 8.2.8 8.2.8.x
postgresql / postgresql 8.2.13 8.2.13.x
postgresql / postgresql 8.2 8.2.x
postgresql / postgresql 7.4.2 7.4.2.x
postgresql / postgresql 8.0.11 8.0.11.x
postgresql / postgresql 8.2.14 8.2.14.x
postgresql / postgresql 7.4.13 7.4.13.x
postgresql / postgresql 8.1.2 8.1.2.x