PT-2006-6256 · Postgresql+1 · Postgresql+1

Michael Fuhr · Publicado 2006-10-26 · Atualizado 2023-10-12 · CVE-2006-5541

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 7.4.1 through 7.4.14 PostgreSQL versions 8.0.x before 8.0.9 PostgreSQL versions 8.1.x before 8.1.5

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This is due to a bug in the coercion of unknown literals to ANYARRAY. A valid login is required to exploit this issue.

Recommendations For versions 7.4.1 through 7.4.14, update to a version outside of this range to resolve the issue. For versions 8.0.x before 8.0.9, update to version 8.0.9 or later to resolve the issue. For versions 8.1.x before 8.1.5, update to version 8.1.5 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-5541

RHSA-2007:0067

RHSA-2007:0068

RHSA-2007_0068

Produtos afetados

Postgresql

Red Hat

Referências · 33

• https://nvd.nist.gov/vuln/detail/CVE-2006-5541 · Nota de Segurança
• https://postgresql.org · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5541 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10905 · Nota
• http://trustix.org/errata/2006/0059 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4182 · Nota
• http://redhat.com/support/errata/RHSA-2007-0068.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2007-0067.html · Aviso do Fabricante
• http://secunia.com/advisories/24577 · Nota
• http://secunia.com/advisories/22584 · Nota
• https://access.redhat.com/security/cve/CVE-2006-5542 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0556 · Nota
• http://securitytracker.com/id?1017115 · Nota
• http://ubuntu.com/usn/usn-369-2 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-5541 · Nota