119 matches found
openSUSE 10 Security Update : postgresql (postgresql-4955)
This version update to 8.2.6 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772, CVE-2007-6067, CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...
openSUSE 10 Security Update : postgresql (postgresql-4958)
This version update to 8.1.11 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772, CVE-2007-6067, CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...
SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 4962)
This version update to 7.4.19 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772 / CVE-2007-6067 / CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...
Moderate: Red Hat Security Advisory: postgresql security update
Updated postgresql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS...
GLSA-200801-15 : PostgreSQL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200801-15 PostgreSQL: Multiple vulnerabilities If using the 'expression indexes' feature, PostgreSQL executes index functions as the superuser during VACUUM and ANALYZE instead of the table owner, and allows SET ROLE and SET SESSI...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : postgresql vulnerabilities (USN-568-1)
Nico Leidecker discovered that PostgreSQL did not properly restrict dblink functions. An authenticated user could exploit this flaw to access arbitrary accounts and execute arbitrary SQL queries. CVE-2007-3278, CVE-2007-6601 It was discovered that the TCL regular expression parser used by...
Debian DSA-1463-1 : postgresql-7.4 - several vulnerabilities
Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3278 It was discovered that the DBLink module performed insufficient credential validation. This iss...
[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1463-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 14, 2008 http://www.debian.org/security/faq -...
RHEL 4 / 5 : postgresql (RHSA-2008:0038)
Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. Th...
DSA-1463-1 postgresql-7.4 - several
Bulletin has no description...
Fedora 8 : postgresql-8.2.6-1.fc8 (2008-0478)
Mon Jan 7 2008 Tom Lane 8.2.6-1 - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 - Make initscript and pam config files be installed unconditionally; seems new buildroots don't necessarily have those directories in place Note that...
[SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1460-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...
postgresql security update
CentOS Errata and Security Advisory CESA-2008:0038 Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...
Moderate: postgresql security update
7.4.19-1.el46.1 - Update to PostgreSQL 7.4.19 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 Resolves: 427135...
CVE-2007-4772
CVE-2007-4772 concerns the Tcl (Tool Command Language) regular expression parser. The affected code path is TCL before 8.4.17, which, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of servic...
CVE-2006-4772
CVE-2006-4772 affects HotPlug CMS. The issue stems from storing sensitive information under the web root with insufficient access control, allowing remote attackers to read the admin password and database credentials via a direct request to includes/class/config.inc . The impact described is part...
CVE-2005-4772
The CVE-2005-4772 entry concerns liby2util in YaST on SUSE Linux prior to 20051007. The description states that liby2util preserves permissions and ownerships when copying a remote repository, which could allow local users to read or modify sensitive files. The connected SUSE CVE-2005-4772 page c...
