{"id":"CVE-2009-3231","aliases":["DSA-1900-1","EUVD-2009-3214","GHSA-gx42-wp82-42x7","RHSA-2009:1461"],"status":"published","title":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...","description":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07568,"percentile":0.94568,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2009-09-17T10:00:00Z","modified":"2026-06-16T23:11:11Z","affected":[{"source":"osv","ecosystem":"Debian:4.0","package":"postgresql-7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.4.26-0etch1"}]}],"versions":["1:7.4.16-1","1:7.4.17-0etch1","1:7.4.17-1","1:7.4.19-0etch1","1:7.4.23-0etch1"],"bundled":3},{"source":"osv","ecosystem":"Debian:4.0","package":"postgresql-8.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.18-0etch1"}]}],"versions":["8.1.10-0etch1","8.1.10-1","8.1.11-0etch1","8.1.11-1","8.1.13-0etch1","8.1.15-0etch1","8.1.17-0etch1","8.1.8-1","8.1.8-2","8.1.9-0etch1","8.1.9-0etch2","8.1.9-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:5.0","package":"postgresql-8.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.8-0lenny1"}]}],"versions":["8.3.5-1","8.3.5-2","8.3.6-1","8.3.6-1~bpo40+1","8.3.7-0lenny1","8.3.7-0lenny1~bpo40+1","8.3.7-1","8.3.7-2","8.3.7-3","8.3.7-4","8.3.8-0lenny1~bpo40+1","8.3.8-0lenny1~bpo40+2"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.13-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.84-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"perl-DBD-MySQL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.012-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"perl-DBD-MySQL-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.012-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.609-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"perl-DBI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.609-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.1-2.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.10-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.510-1jpp.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-jdbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.510-1jpp.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-tcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_application_stack:2","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.14-1.el5s2"}]}],"bundled":8}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"postgresql","product":"postgresql"},{"vendor":"suse","product":"linux_enterprise"},{"vendor":"suse","product":"linux_enterprise_server"}],"references":[{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List"]},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes"]},{"url":"http://www.securityfocus.com/bid/36314","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=134124585221119\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Mailing List"]},{"url":"http://secunia.com/advisories/36837","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.postgresql.org/support/security.html","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36660","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/36800","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.us.debian.org/security/2009/dsa-1900","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522084","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","report"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List"]},{"url":"http://secunia.com/advisories/36727","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List"]},{"url":"http://www.ubuntu.com/usn/usn-834-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3231","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gx42-wp82-42x7"},{"url":"https://access.redhat.com/errata/RHSA-2009:1461","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=466518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=506896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522209","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4456","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4456","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2446","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2687","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3229","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3229","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3230","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3230","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3231","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-3231","description":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.","status":"published","published":"2009-09-17T10:00:00Z","modified":"2024-08-07T06:22:23.182Z","updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3214","description":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.","status":"published","published":"2009-09-17T10:00:00Z","modified":"2024-08-07T06:22:23Z","updated_at":"2026-11-03T01:39:14.567966Z"}],"ghsa":[{"id":"GHSA-gx42-wp82-42x7","title":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...","description":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.","status":"published","published":"2022-05-02T03:43:02Z","modified":"2023-01-31T05:08:36Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:49:25.675023Z"}],"nvd":[{"id":"CVE-2009-3231","description":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.","status":"published","published":"2009-09-17T10:30:01.233Z","modified":"2026-06-16T23:11:11.463Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:01:36.596719Z"}],"osv":[{"id":"DSA-1900-1","title":"postgresql-7.4 postgresql-8.1 postgresql-8.3 - various problems","status":"published","published":"2009-10-02T00:00:00Z","modified":"2026-03-09T01:19:06.301819Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"RHSA-2009:1461","title":"Red Hat Security Advisory: Red Hat Application Stack v2.4 security and enhancement update","status":"published","published":"2024-09-15T18:04:24Z","modified":"2025-11-22T10:22:37Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}