What is CVE-2013-1903?

CVE-2013-1903 is a vulnerability in Postgresql, classified under CWE-264. Published 2013-04-04.

Is CVE-2013-1903 known to be exploited?

16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Postgresql

CVE-2013-1903

PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors.

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

Affected products

Postgresql — versions 9.2, 9.2.1, 9.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-1903?: CVE-2013-1903 is a vulnerability in Postgresql, classified under CWE-264. Published 2013-04-04.
Is CVE-2013-1903 known to be exploited?: 16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.