[SECURITY] [DSA 1900-1] New PostgreSQL packages fix various problems

------------------------------------------------------------------------ Debian Security Advisory DSA-1900-1 [email protected] http://www.debian.org/security/ Florian Weimer October 02, 2009 http://www.debian.org/security/faq -...

DSA-1900-1 postgresql-7.4 postgresql-8.1 postgresql-8.3 - various problems

Bulletin has no description...

MDVSA-2009:177 : postgresql

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by re-LOAD-ing libraries from a certain plugins directory CVE-2009-3229. The core server component in PostgreSQL 8.4...

openSUSE Security Update : postgresql (postgresql-1322)

Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...

openSUSE Security Update : postgresql (postgresql-1322)

Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...

Ubuntu USN-834-1 (postgresql-8.3)

The remote host is missing an update to postgresql-8.3 announced via advisory USN-834-1. OpenVAS Vulnerability Test $Id: ubuntu8341.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8341.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-834-1 postgresql-8.3...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 12509)

Multiple security vulnerabilities have been fixed in PostgreSQL : - allows remote authenticated users to cause a denial of service. CVE-2009-3229 - allows remote authenticated users to gain higher privileges. CVE-2009-3230 - when using LDAP authentication with anonymous binds, allows remote...

Ubuntu: Security Advisory (USN-834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-834-1] PostgreSQL vulnerabilities

=========================================================== Ubuntu Security Notice USN-834-1 September 21, 2009 postgresql-8.1, postgresql-8.3 vulnerabilities CVE-2009-3229, CVE-2009-3230, CVE-2009-3231 =========================================================== A security issue affects the...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : postgresql-8.1, postgresql-8.3 vulnerabilities (USN-834-1)

It was discovered that PostgreSQL could be made to unload and reload an already loaded module by using the LOAD command. A remote authenticated attacker could exploit this to cause a denial of service. This issue did not affect Ubuntu 6.06 LTS. CVE-2009-3229 Due to an incomplete fix for...

Solaris 10 (x86) : 138827-12 (deprecated)

SunOS 5.10x86: PostgreSQL 8.3 core patch. Date this patch was last updated by Sun : Mar/29/13 This plugin has been deprecated and either replaced with individual 138827 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Solaris 10 (sparc) : 138826-12 (deprecated)

SunOS 5.10: PostgreSQL 8.3 core patch. Date this patch was last updated by Sun : Mar/29/13 This plugin has been deprecated and either replaced with individual 138826 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

CVE-2008-3229

The CVE-2008-3229 entry describes a stack-based buffer overflow in op before Changeset 563 when xauth support is enabled, allowing local users to gain privileges via a long XAUTHORITY environment variable. The connected records confirm the basic cause and impact (local privilege escalation) but d...

CVE-2007-3229

index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directory gallery parameter, which reveals the path in an error message...

CVE-2007-3229

Summary: CVE-2007-3229 relates to index.php in the Singapore Gallery. Vulnerability: Remote attackers can trigger an error message by supplying a non-directory gallery parameter, which reveals the server path and exposes sensitive information. Impact: Partial disclosure of information (path data)...

CVE-2006-3229

Open WebMail (OWM) 2.52 (and earlier builds released before 2006-05-12) is affected by a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via the To and From fields in openwebmail-main.pl, and possibly via other vectors related to ...

CVE-2005-3229

Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3229

Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3229

Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3229

CVE-2005-3229 describes a vulnerability in unspecified versions of ClamAV Antivirus where multiple interpretation errors in the RAR archive handling allow a remote attacker to bypass virus detection by presenting a malicious executable within a specially crafted RAR file with malformed central an...