PT-2006-1186 · Postgresql · Postgresql

Marc G. Fournier · Publicado 2006-01-10 · Atualizado 2018-10-19 · CVE-2006-0105

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 8.0.x through 8.0.5 PostgreSQL versions 8.1.x through 8.1.1

Description: The issue allows remote attackers to cause a denial of service, resulting in the postmaster exit and preventing new connections, via a large number of simultaneous connection requests. This does not affect existing database connections but will prevent new connections from being established until the postmaster is manually restarted.

Recommendations: For PostgreSQL versions 8.0.x through 8.0.5, update to version 8.0.6 or later to resolve the issue. For PostgreSQL versions 8.1.x through 8.1.1, update to version 8.1.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-0105

Produtos afetados

Postgresql

Referências · 14

• http://securitytracker.com/id?1015482 · Nota
• http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php · Correção
• http://postgresql.org/about/news.456 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24049 · Nota
• http://securityreason.com/securityalert/327 · Nota
• http://securityfocus.com/bid/16201 · Nota
• https://postgresql.org/support/security/CVE-2006-0105 · Nota
• http://securityfocus.com/archive/1/421592/100/0/threaded · Nota
• http://secunia.com/advisories/18419 · Nota
• http://vupen.com/english/advisories/2006/0114 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0105 · Nota
• https://postgresql.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0105 · Nota de Segurança
• https://postgresql.org/support/security · Nota