Lucene search
PostgreSQL Global Development GroupPOSTGRESQL:CVE-2006-2314HistoryMay 24, 2006 - 10:06 a.m.
Vulnerability in core server (CVE-2006-2314)
2006-05-2410:06:00
PostgreSQL Global Development Group
www.postgresql.org
53
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
88.6%
The widely-used practice of escaping ASCII single quote “'” by turning it into “'” is unsafe when operating in multibyte encodings that allow 0x5c (ASCII code for backslash) as the trailing byte of a multibyte character.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | lt | 7.4.13 | |
| postgresql | lt | 8.1.4 | |
| postgresql | lt | 7.3.15 | |
| postgresql | lt | 8.0.8 |
References
Related
debiancve
debiancve
CVE-2006-2314
2006-05-24 10:06:00
nessus
nessus
openSUSE 10 Security Update : dovecot (dovecot-1987)
2007-10-17 00:00:00
Debian DSA-1087-1 : postgresql - programming error
2006-10-14 00:00:00
Fedora 7 : php-pear-DB-1.7.11-1.fc7 (2007-0249)
2007-11-06 00:00:00
cve
cve
CVE-2006-2314
2006-05-24 10:06:00
CVE-2006-2824
2006-06-05 17:02:00
ubuntucve
ubuntucve
CVE-2006-2314
2006-05-24 00:00:00
prion
prion
Sql injection
2006-05-24 10:06:00
Design/Logic Flaw
2006-06-05 17:02:00
openvas
openvas
Debian Security Advisory DSA 1087-1 (postgresql)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1087-1)
2008-01-17 00:00:00
FreeBSD Ports: postgresql, postgresql-server, ja-postgresql
2008-09-04 00:00:00
securityvulns
securityvulns
PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15
2006-05-26 00:00:00
[Full-disclosure] rPSA-2006-0080-1 postgresql postgresql-server
2006-05-25 00:00:00
gentoo
gentoo
PostgreSQL: SQL injection
2006-07-09 00:00:00
osv
osv
postgresql - programming error
2006-06-03 00:00:00
suse
suse
remote code execution in postgresql
2006-06-09 14:03:55
debian
debian
[SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities
2006-06-03 07:52:06
ubuntu
ubuntu
PostgreSQL server/client vulnerabilities
2006-06-09 00:00:00
PostgreSQL server/client vulnerabilities
2006-05-29 00:00:00
PostgreSQL client vulnerabilities
2006-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: php-pear-DB-1.7.11-1.fc7
2007-06-06 16:42:53
freebsd
freebsd
postgresql -- encoding based SQL injection
2006-05-11 00:00:00
centos
centos
postgresql, rh security update
2006-05-23 21:38:04
redhat
redhat
(RHSA-2006:0526) postgresql security update
2006-05-23 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
88.6%
Related for POSTGRESQL:CVE-2006-2314