CVE-2012-0868

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted…

published July 18, 2012

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02653 · 85.5th percentile
Published
2012-07-18T23:00Z
EPSS history
Timeline
  • 18 JUL 23:00Z
    CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted…
    cvelistv5