PT-2006-1186 · Postgresql · Postgresql

Marc G. Fournier · Published 2006-01-10 · Updated 2018-10-19 · CVE-2006-0105

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 8.0.x through 8.0.5 PostgreSQL versions 8.1.x through 8.1.1

Description: The issue allows remote attackers to cause a denial of service, resulting in the postmaster exit and preventing new connections, via a large number of simultaneous connection requests. This does not affect existing database connections but will prevent new connections from being established until the postmaster is manually restarted.

Recommendations: For PostgreSQL versions 8.0.x through 8.0.5, update to version 8.0.6 or later to resolve the issue. For PostgreSQL versions 8.1.x through 8.1.1, update to version 8.1.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-0105

Affected Products

Postgresql

References · 14

• http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0105 · Security Note
• http://securitytracker.com/id?1015482 · Note
• http://postgresql.org/about/news.456 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24049 · Note
• http://securityreason.com/securityalert/327 · Note
• http://securityfocus.com/bid/16201 · Note
• https://postgresql.org/support/security/CVE-2006-0105 · Note
• http://securityfocus.com/archive/1/421592/100/0/threaded · Note
• http://secunia.com/advisories/18419 · Note
• http://vupen.com/english/advisories/2006/0114 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0105 · Note
• https://postgresql.org · Note
• https://postgresql.org/support/security · Note