Lucene search

K
postgresqlPostgreSQL Global Development GroupPOSTGRESQL:CVE-2007-0555
HistoryFeb 06, 2007 - 1:28 a.m.

Vulnerability in core server (CVE-2007-0555)

2007-02-0601:28:00
PostgreSQL Global Development Group
www.postgresql.org
48

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:N/A:C

0.011 Low

EPSS

Percentile

82.6%

A vulnerability allows suppressing the normal checks that a SQL function returns the data type it’s declared to do. These errors can easily be exploited to cause a backend crash, and in principle might be used to read database content that the user should not be able to access.

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:N/A:C

0.011 Low

EPSS

Percentile

82.6%