Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-2313
HistoryMay 24, 2006 - 10:06 a.m.

CVE-2006-2313

2006-05-2410:06:00
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.6%

JSON

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of “Encoding-Based SQL Injection.”

Affected configurations

NVD
Node
postgresqlpostgresqlMatch7.3
OR
postgresqlpostgresqlMatch7.3.1
OR
postgresqlpostgresqlMatch7.3.2
OR
postgresqlpostgresqlMatch7.3.3
OR
postgresqlpostgresqlMatch7.3.4
OR
postgresqlpostgresqlMatch7.3.5
OR
postgresqlpostgresqlMatch7.3.6
OR
postgresqlpostgresqlMatch7.3.7
OR
postgresqlpostgresqlMatch7.3.8
OR
postgresqlpostgresqlMatch7.3.9
OR
postgresqlpostgresqlMatch7.3.10
OR
postgresqlpostgresqlMatch7.3.11
OR
postgresqlpostgresqlMatch7.3.12
OR
postgresqlpostgresqlMatch7.3.13
OR
postgresqlpostgresqlMatch7.3.14
OR
postgresqlpostgresqlMatch7.4
OR
postgresqlpostgresqlMatch7.4.1
OR
postgresqlpostgresqlMatch7.4.2
OR
postgresqlpostgresqlMatch7.4.3
OR
postgresqlpostgresqlMatch7.4.4
OR
postgresqlpostgresqlMatch7.4.5
OR
postgresqlpostgresqlMatch7.4.6
OR
postgresqlpostgresqlMatch7.4.7
OR
postgresqlpostgresqlMatch7.4.8
OR
postgresqlpostgresqlMatch7.4.9
OR
postgresqlpostgresqlMatch7.4.10
OR
postgresqlpostgresqlMatch7.4.11
OR
postgresqlpostgresqlMatch7.4.12
OR
postgresqlpostgresqlMatch8.0
OR
postgresqlpostgresqlMatch8.0.1
OR
postgresqlpostgresqlMatch8.0.2
OR
postgresqlpostgresqlMatch8.0.3
OR
postgresqlpostgresqlMatch8.0.4
OR
postgresqlpostgresqlMatch8.0.5
OR
postgresqlpostgresqlMatch8.0.6
OR
postgresqlpostgresqlMatch8.0.7
OR
postgresqlpostgresqlMatch8.1
OR
postgresqlpostgresqlMatch8.1.1
OR
postgresqlpostgresqlMatch8.1.2
OR
postgresqlpostgresqlMatch8.1.3

References

Related

postgresql 1
cvelist 2
prion 2
ubuntucve 1
cve 2
nessus 15
openvas 10
ubuntu 3
securityvulns 2
osv 1
gentoo 1
fedora 1
freebsd 1
debian 1
suse 1
centos 1
nvd 1
redhat 1
postgresql
postgresql
Vulnerability in core server (CVE-2006-2313)
2006-05-24 10:06:00
cvelist
cvelist
CVE-2006-2313
2006-05-24 10:00:00
CVE-2006-2824
2006-06-05 17:00:00
prion
prion
Sql injection
2006-05-24 10:06:00
Design/Logic Flaw
2006-06-05 17:02:00
ubuntucve
ubuntucve
CVE-2006-2313
2006-05-24 00:00:00
cve
cve
CVE-2006-2313
2006-05-24 10:06:00
CVE-2006-2824
2006-06-05 17:02:00
nessus
nessus
openSUSE 10 Security Update : postgresql (postgresql-1443)
2007-10-17 00:00:00
SUSE-SA:2006:030: postgresql
2006-06-16 00:00:00
Fedora Core 4 : postgresql-8.0.8-1.FC4.1 (2006-579)
2007-01-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200607-04 (postgresql)
2008-09-24 00:00:00
FreeBSD Ports: postgresql, postgresql-server, ja-postgresql
2008-09-04 00:00:00
Fedora Update for php-pear-DB FEDORA-2007-0249
2009-02-27 00:00:00
ubuntu
ubuntu
PostgreSQL server/client vulnerabilities
2006-06-09 00:00:00
PostgreSQL server/client vulnerabilities
2006-05-29 00:00:00
PostgreSQL client vulnerabilities
2006-06-09 00:00:00
securityvulns
securityvulns
[Full-disclosure] rPSA-2006-0080-1 postgresql postgresql-server
2006-05-25 00:00:00
PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15
2006-05-26 00:00:00
osv
osv
postgresql - programming error
2006-06-03 00:00:00
gentoo
gentoo
PostgreSQL: SQL injection
2006-07-09 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: php-pear-DB-1.7.11-1.fc7
2007-06-06 16:42:53
freebsd
freebsd
postgresql -- encoding based SQL injection
2006-05-11 00:00:00
debian
debian
[SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities
2006-06-03 07:52:06
suse
suse
remote code execution in postgresql
2006-06-09 14:03:55
centos
centos
postgresql, rh security update
2006-05-23 21:38:04
nvd
nvd
CVE-2006-2824
2006-06-05 17:02:00
redhat
redhat
(RHSA-2006:0526) postgresql security update
2006-05-23 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.6%

JSON
Related for NVD:CVE-2006-2313
postgresql1cvelist2prion2ubuntucve1cve2nessus15openvas10ubuntu3securityvulns2osv1gentoo1fedora1freebsd1debian1suse1centos1nvd1redhat1