CVE:CVE-2012-0867
CNNVD:CNNVD-201203-007
PostgreSQL是PostgreSQL开发组所研发的一套自由的对象关系型数据库管理系统。该系统支持大部分SQL标准并且提供了许多其他特性，例如外键、触发器、视图等。
PostgreSQL 8.4.11之前的8.4.x版本、9.0.7之前的9.0.x版本和9.1.3之前的9.1.x版本中存在漏洞，该漏洞源于验证SSL证书通用名称时的错误。攻击者可利用该漏洞导致欺骗证书成功通过验证。
solution:Upgrade opensuse_project opensuse to a higher version than 12.2,and avoid the version 12.2; Upgrade postgresql postgresql to a higher version than 8.4,8.4.1,8.4.2,8.4.3,8.4.4,8.4.5,8.4.6,8.4.7,8.4.8,8.4.9,8.4.10,9.0,9.0.1,9.0.2,9.0.3,9.0.4,9.0.5,9.0.6,9.1,9.1.1,9.1.2,and avoid the version 8.4,8.4.1,8.4.2,8.4.3,8.4.4,8.4.5,8.4.6,8.4.7,8.4.8,8.4.9,8.4.10,9.0,9.0.1,9.0.2,9.0.3,9.0.4,9.0.5,9.0.6,9.1,9.1.1,9.1.2; Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat desktop_workstation to a higher version than 5,and avoid the version 5; Upgrade redhat enterprise_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,and avoid the version 6.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.2.z,and avoid the version 6.2.z; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0