Every CVE Search/ Get API key

CVE-2009-3231

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...

6.8 Medium

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Exploit likelihood

7.57%Up 3.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
CVE-2009-3231
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
CVE-2009-3231
Updated
2026-11-02
EUVDEUVD-2009-3214 No score

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
EUVD-2009-3214
Updated
2026-11-03
GitHub AdvisoriesGHSA-gx42-wp82-42x7 No score

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Record
GHSA-gx42-wp82-42x7
Weakness
CWE-287
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql-7.4
Debian:4.0
From an advisory covering 3 CVEs
 before 1:7.4.26-0etch1, plus listed versions
1:7.4.16-11:7.4.17-0etch11:7.4.17-11:7.4.19-0etch11:7.4.23-0etch1
1:7.4.26-0etch1
postgresql-8.1
Debian:4.0
From an advisory covering 3 CVEs
 before 8.1.18-0etch1, plus listed versions
8.1.10-0etch18.1.10-18.1.11-0etch18.1.11-18.1.13-0etch1
Show 7 moreShow less
8.1.15-0etch18.1.17-0etch18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1
8.1.18-0etch1
postgresql-8.3
Debian:5.0
From an advisory covering 3 CVEs
 before 8.3.8-0lenny1, plus listed versions
8.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny1
Show 7 moreShow less
8.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+2
8.3.8-0lenny1
httpd
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
httpd-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
httpd-devel
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
httpd-manual
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:2.2.13-2.el5s2
0:2.2.13-2.el5s2
mod_ssl
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 1:2.2.13-2.el5s2
1:2.2.13-2.el5s2
mysql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-bench
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
Show 46 moreShow less
Affected packages
PackageAffectedFixed
mysql-cluster
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-devel
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-libs
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-server
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
mysql-test
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.0.84-2.el5s2
0:5.0.84-2.el5s2
perl-DBD-MySQL
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:4.012-1.el5s2
0:4.012-1.el5s2
perl-DBD-MySQL-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:4.012-1.el5s2
0:4.012-1.el5s2
perl-DBI
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:1.609-1.el5s2
0:1.609-1.el5s2
perl-DBI-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:1.609-1.el5s2
0:1.609-1.el5s2
php
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-bcmath
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-cli
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-common
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-dba
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-devel
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-gd
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-imap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-ldap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-mbstring
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-mysql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-ncurses
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-odbc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-pdo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-pear
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 1:1.8.1-2.el5s2
1:1.8.1-2.el5s2
php-pgsql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-snmp
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-soap
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-xml
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
php-xmlrpc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:5.2.10-1.el5s2
0:5.2.10-1.el5s2
postgresql
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-contrib
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-devel
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-docs
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-jdbc
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.510-1jpp.el5s2
0:8.2.510-1jpp.el5s2
postgresql-jdbc-debuginfo
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.510-1jpp.el5s2
0:8.2.510-1jpp.el5s2
postgresql-libs
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-plperl
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-plpython
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-pltcl
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-python
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-server
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-tcl
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2
postgresql-test
Red Hat:rhel_application_stack:2
From an advisory covering 8 CVEs
 before 0:8.2.14-1.el5s2
0:8.2.14-1.el5s2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3231 is a medium vulnerability (CVSS 6.8) in Postgresql, published September 17, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.57%, the 94th percentile. No source names a fixed version.

References

Show 46 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open