CVE-2012-3488 XML external entity in n/a

Medium 4.9 Published 3 Oct 2012 Updated 6 Aug 2024

Authenticated users can exploit XXE in libxslt to read files, modify data, or trigger SSRF in PostgreSQL.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2012-3488?

CVE-2012-3488 is a medium-severity vulnerability in Postgresql Postgresql, published on 3 Oct 2012. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.

Weakness: CWE-264

Which versions are affected by CVE-2012-3488?

It affects 1 product.

Linux distribution packages (24)

`postgresql` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql-contrib` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql-docs` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql-libs` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql-python` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql-tcl` Red Hat:enterprise_linux:5::client	All versions	`0:8.1.23-6.el5_8`
`postgresql` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:8.1.23-6.el5_8`
`postgresql-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:8.1.23-6.el5_8`
`postgresql-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:8.1.23-6.el5_8`
`postgresql-pl` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:8.1.23-6.el5_8`
`postgresql-server` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:8.1.23-6.el5_8`
`postgresql-test` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:8.1.23-6.el5_8`
`postgresql` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-contrib` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-devel` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-docs` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-libs` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-pl` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-python` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-server` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-tcl` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`
`postgresql-test` Red Hat:enterprise_linux:5::server	All versions	`0:8.1.23-6.el5_8`

Products include Postgresql Postgresql.

How do I fix CVE-2012-3488?

Upgrade to a fixed version.

Is CVE-2012-3488 being exploited?

There is no known exploitation of CVE-2012-3488 in the wild and no public exploit code.

All Postgresql Postgresql vulnerabilities

Sources

Also known as GHSA-8wqv-9478-cg4h, RHSA-2012:1264.