VULNERABILITY INTELLIGENCE
CVE-2009-3231
CVSS score6.8 MEDIUM
EPSS probability7.57%
CISA KEVNot currently listed
Published2009-09-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- cve@mitre.org — Mailing List
- cve@mitre.org — Mailing List
- cve@mitre.org — Mailing List
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Release Notes
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry