Every CVE Search/ Get API key

CVE-2009-3231

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...

6.8 MediumFix available

CVE-2009-3231 is a medium vulnerability (CVSS 6.8) in Postgresql, published September 17, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.57%, the 94th percentile. Fixed in postgresql-7.4 1:7.4.26-0etch1.

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Exploit likelihood

7.57%Up 3.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
CVE-2009-3231
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
CVE-2009-3231
Updated
2026-11-02
EUVDEUVD-2009-3214 No score

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
EUVD-2009-3214
Updated
2026-11-03
GitHub AdvisoriesGHSA-gx42-wp82-42x7 No score

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
GHSA-gx42-wp82-42x7
Weakness
CWE-287
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql-7.4
Debian:4.0
 before 1:7.4.26-0etch1, plus listed versions
1:7.4.16-11:7.4.17-0etch11:7.4.17-11:7.4.19-0etch11:7.4.23-0etch1
1:7.4.26-0etch1
postgresql-8.1
Debian:4.0
 before 8.1.18-0etch1, plus listed versions
8.1.10-0etch18.1.10-18.1.11-0etch18.1.11-18.1.13-0etch1
Show 7 moreShow less
8.1.15-0etch18.1.17-0etch18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1
8.1.18-0etch1
postgresql-8.3
Debian:5.0
 before 8.3.8-0lenny1, plus listed versions
8.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny1
Show 7 moreShow less
8.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+2
8.3.8-0lenny1
httpd
Red Hat:rhel_application_stack:2
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
httpd-debuginfo
Red Hat:rhel_application_stack:2
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
httpd-devel
Red Hat:rhel_application_stack:2
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
httpd-manual
Red Hat:rhel_application_stack:2
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
mod_ssl
Red Hat:rhel_application_stack:2
 before 1:2.2.13-2.el5s2
1:2.2.13-2.el5s2
mysql
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-bench
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
Show 46 moreShow less
Affected packages
PackageAffectedFixed
mysql-cluster
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-debuginfo
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-devel
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-libs
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-server
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-test
Red Hat:rhel_application_stack:2
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
perl-DBD-MySQL
Red Hat:rhel_application_stack:2
 before 0:4.012-1.el5s2
0:4.012-1.el5s2
perl-DBD-MySQL-debuginfo
Red Hat:rhel_application_stack:2
 before 0:4.012-1.el5s2
0:4.012-1.el5s2
perl-DBI
Red Hat:rhel_application_stack:2
 before 0:1.609-1.el5s2
0:1.609-1.el5s2
perl-DBI-debuginfo
Red Hat:rhel_application_stack:2
 before 0:1.609-1.el5s2
0:1.609-1.el5s2
php
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-bcmath
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-cli
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-common
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-dba
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-debuginfo
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-devel
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-gd
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-imap
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-ldap
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-mbstring
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-mysql
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-ncurses
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-odbc
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-pdo
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-pear
Red Hat:rhel_application_stack:2
 before 1:1.8.1-2.el5s2
1:1.8.1-2.el5s2
php-pgsql
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-snmp
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-soap
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-xml
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-xmlrpc
Red Hat:rhel_application_stack:2
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
postgresql
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-contrib
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-debuginfo
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-devel
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-docs
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-jdbc
Red Hat:rhel_application_stack:2
 before 0:8.2.510-1jpp.el5s2
0:8.2.510-1jpp.el5s2
postgresql-jdbc-debuginfo
Red Hat:rhel_application_stack:2
 before 0:8.2.510-1jpp.el5s2
0:8.2.510-1jpp.el5s2
postgresql-libs
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-plperl
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-plpython
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-pltcl
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-python
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-server
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-tcl
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-test
Red Hat:rhel_application_stack:2
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 46 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open