Amazon Linux AMI update for postgresql9

1) Cryptographic issues

EUVDB-ID: #VU43910

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2012-2143

CWE-ID: CWE-310 - Cryptographic Issues

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password. As per: http://git.php.net/?p=php-src.git;a=commitdiff;h=aab49e934de1fff046e659cbec46e3d053b41c34 and http://git.php.net/?p=php-src.git;a=commitdiff_plain;h=aab49e934de1fff046e659cbec46e3d053b41c34 PHP 5.3.13 and earlier are vulnerable.

Mitigation

Update the affected packages:

i686:
    postgresql9-debuginfo-9.1.4-1.21.amzn1.i686
    postgresql9-9.1.4-1.21.amzn1.i686
    postgresql9-server-9.1.4-1.21.amzn1.i686
    postgresql9-libs-9.1.4-1.21.amzn1.i686
    postgresql9-test-9.1.4-1.21.amzn1.i686
    postgresql9-contrib-9.1.4-1.21.amzn1.i686
    postgresql9-plpython-9.1.4-1.21.amzn1.i686
    postgresql9-plperl-9.1.4-1.21.amzn1.i686
    postgresql9-devel-9.1.4-1.21.amzn1.i686
    postgresql9-pltcl-9.1.4-1.21.amzn1.i686
    postgresql9-docs-9.1.4-1.21.amzn1.i686

src:
    postgresql9-9.1.4-1.21.amzn1.src

x86_64:
    postgresql9-server-9.1.4-1.21.amzn1.x86_64
    postgresql9-test-9.1.4-1.21.amzn1.x86_64
    postgresql9-plpython-9.1.4-1.21.amzn1.x86_64
    postgresql9-contrib-9.1.4-1.21.amzn1.x86_64
    postgresql9-docs-9.1.4-1.21.amzn1.x86_64
    postgresql9-libs-9.1.4-1.21.amzn1.x86_64
    postgresql9-devel-9.1.4-1.21.amzn1.x86_64
    postgresql9-9.1.4-1.21.amzn1.x86_64
    postgresql9-debuginfo-9.1.4-1.21.amzn1.x86_64
    postgresql9-pltcl-9.1.4-1.21.amzn1.x86_64
    postgresql9-plperl-9.1.4-1.21.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

CPE2.3

• cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*

External links

https://alas.aws.amazon.com/ALAS-2012-91.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.