● CVE
CVE-2012-0867
Vendordebian, redhat, postgresql, opensuse projectProductdebian linux, enterprise linux, enterprise linux server, enterprise linux server aus, enterprise linux desktop, enterprise linux workstation, enterprise linux server eus, postgresql, enterprise linux hpc node, opensuse, desktop workstationDiscoveredJul 18, 2012UpdatedApr 29, 2026
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.