Page 12 of 63 results (0.005 seconds)

CVSS: 4.0EPSS: 2%CPEs: 56EXPL: 0

CVE-2006-5540

https://notcve.org/view.php?id=CVE-2006-5540

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization." El fichero backend/parser/analyze.c en PostgreSQL 8.1.x versiones anteriores a 8.1.5 permite a usuarios remotos sin autenticar provocar una denegación de servicio (daemon crash) mediante funciones agregadas concretas en una sentencia UPDATE, que no han sido debidamente tratadas durante una "optimización de índices MIN/MAX." • ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc http://projects.commandprompt.com/public/pgsql/changeset/25504 http://secunia.com/advisories/22562 http://secunia.com/advisories/22584 http://secunia.com/advisories/22606 http://secunia.com/advisories/22636 http://secunia.com/advisories/23048 http://secunia.com/advisories/23132 http://secunia.com/advisories/24094 http://secunia.com/advisories/24284 http://secunia.com/advisories/24577 http://securitytracker.co •

CVSS: 4.0EPSS: 1%CPEs: 3EXPL: 0

CVE-2006-5541

https://notcve.org/view.php?id=CVE-2006-5541

backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY. El fichero backend/parser/parse_coerce.c en PostgreSQL versiones 7.4.1 hasta 7.4.14, 8.0.x anteriores a 8.0.9, y 8.1.x anteriores a 8.1.5 permite a usuarios remotos autenticados, provocar una denegación de servicio (daemon crash) mediante una coacción de un elemento desconocido a ANYARRAY. • http://projects.commandprompt.com/public/pgsql/changeset/26457 http://secunia.com/advisories/22562 http://secunia.com/advisories/22584 http://secunia.com/advisories/22606 http://secunia.com/advisories/22636 http://secunia.com/advisories/23048 http://secunia.com/advisories/23132 http://secunia.com/advisories/24577 http://securitytracker.com/id?1017115 http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html http •

CVSS: 4.0EPSS: 1%CPEs: 5EXPL: 0

CVE-2006-5542 – New version fixes three different crash vulnerabilities

https://notcve.org/view.php?id=CVE-2006-5542

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements. El fichero backend/tcop/postgres.c de PostgreSQL 8.1.x anterioers a 8.1.5, permite a usuarios remotos autenticados, provocar una denegación de servicio (daemon crash) relativo a la duración de logado del protocolo-V3. Ejecuta mensajes para las sentencias SQL (1) COMMIT y(2) ROLLBACK. • http://projects.commandprompt.com/public/pgsql/changeset/25953 http://secunia.com/advisories/22562 http://secunia.com/advisories/22584 http://secunia.com/advisories/22606 http://secunia.com/advisories/22636 http://secunia.com/advisories/23048 http://secunia.com/advisories/23132 http://secunia.com/advisories/24577 http://securitytracker.com/id?1017115 http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html http •

CVSS: 7.5EPSS: 0%CPEs: 40EXPL: 0

CVE-2006-2313

https://notcve.org/view.php?id=CVE-2006-2313

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection." • ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html http://secunia.com/advisories/20231 http://secunia.com/advisories/20232 http://secunia.com/advisories/20314 http://secunia.com/advisories/20435 http://secunia.com/advisories/20451 http://secunia.com/advisories/20503 http://secunia.com/advisories/20555 http://secunia.c •

CVSS: 7.5EPSS: 1%CPEs: 40EXPL: 0

CVE-2006-2314

https://notcve.org/view.php?id=CVE-2006-2314

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem. • ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html http://secunia.com/advisories/20231 http://secunia.com/advisories/20232 http://secunia.com/advisories/20314 http://secunia.com/advisories/20435 http://secunia.com/advisories/20451 http://secunia.com/advisories/20503 http://secunia.com/advisories/20555 http://secunia.c •