PT-2006-6256 · Postgresql+1 · Postgresql+1

Michael Fuhr · Published 2006-10-26 · Updated 2023-10-12 · CVE-2006-5541

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 7.4.1 through 7.4.14 PostgreSQL versions 8.0.x before 8.0.9 PostgreSQL versions 8.1.x before 8.1.5

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This is due to a bug in the coercion of unknown literals to ANYARRAY. A valid login is required to exploit this issue.

Recommendations For versions 7.4.1 through 7.4.14, update to a version outside of this range to resolve the issue. For versions 8.0.x before 8.0.9, update to version 8.0.9 or later to resolve the issue. For versions 8.1.x before 8.1.5, update to version 8.1.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-5541

RHSA-2007:0067

RHSA-2007:0068

RHSA-2007_0068

Affected Products

Postgresql

Red Hat

References · 33

• https://nvd.nist.gov/vuln/detail/CVE-2006-5541 · Security Note
• http://trustix.org/errata/2006/0059 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0068.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0067.html · Vendor Advisory
• http://ubuntu.com/usn/usn-369-2 · Vendor Advisory
• http://securityfocus.com/bid/20717 · Patch
• http://ubuntu.com/usn/usn-369-1 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_27_sr.html · Vendor Advisory
• http://postgresql.org/about/news.664 · Patch
• http://mandriva.com/security/advisories?name=MDKSA-2006:194 · Vendor Advisory
• https://postgresql.org · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5541 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10905 · Note
• http://vupen.com/english/advisories/2006/4182 · Note
• http://secunia.com/advisories/24577 · Note