CVE-2009-3231
No CVSS score yet. EPSS 7.6% chance of exploitation in the next 30 days.
The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.
- EPSS
- 7.6% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- fedoraproject:fedora
- opensuse:opensuse
- postgresql:postgresql
- suse:linux_enterprise
- suse:linux_enterprise_server