204 matches found
Ubuntu Update for postgresql vulnerabilities USN-568-1
Ubuntu Update for Linux kernel vulnerabilities USN-568-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5681.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postgresql vulnerabilities USN-568-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
RHEL 4 : postgresql (RHSA-2005:138)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:138 advisory. A flaw in the LOAD command in PostgreSQL was discovered. A local user could use this flaw to load arbitrary shared libraries and therefore...
Mandrake Linux Security Advisory : postgresql (MDKSA-2005:040)
A number of vulnerabilities were found and corrected in the PostgreSQL DBMS : A flaw in the LOAD command could be abused by a local user to load arbitrary shared libraries and as a result execute arbitrary code with the privileges of the user running the postgresql server CVE-2005-0227. A...
[SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 683-1 [email protected] http://www.debian.org/security/ Martin Schulze February 15th, 2005 http://www.debian.org/security/faq -...
security flaw
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...
GLSA-200502-08 : PostgreSQL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200502-08 PostgreSQL: Multiple vulnerabilities PostgreSQL's contains several vulnerabilities: John Heasman discovered that the LOAD extension is vulnerable to local privilege escalation CAN-2005-0227. It is possible to bypass the...
USN-79-1: PostgreSQL vulnerabilities
The execution of custom PostgreSQL functions can be restricted with the EXECUTE privilege. However, previous versions did not check this privilege when executing a function which was part of an aggregate. As a result, any database user could circumvent the EXECUTE restriction of functions with a...
PostgreSQL < 7.2.7 / 7.3.9 / 7.4.7 / 8.0.1 Multiple Vulnerabilities
The remote PostgreSQL server, according to its version number, is vulnerable to multiple flaws that could allow an attacker who has the rights to query the remote database to obtain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
PostgreSQL < 8.0.1 Multiple Remote Vulnerabilities
Binary data 2583.prm...
PostgreSQL 7.x - Multiple Vulnerabilities
// source: https://www.securityfocus.com/bid/12417/info Multiple remote vulnerabilities affect PostgreSQL. These issues are due to design errors, buffer-mismanagement errors, and causes that are currently unspecified. The vulnerabilities are as follows: - The application fails to enforce function...
CVE-2004-0977
The makeoidjoinscheck script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files...
Debian DSA-229-1 : imp - SQL injection
Jouko Pynnonen discovered a problem with IMP, a web-based IMAP mail program. Using carefully crafted URLs a remote attacker is able to inject SQL code into SQL queries without proper user authentication. Even though results of SQL queries aren't directly readable from the screen, an attacker migh...
Debian DSA-165-1 : postgresql - buffer overflows
Mordred Labs and others found several vulnerabilities in PostgreSQL, an object-relational SQL database. They are inherited from several buffer overflows and integer overflows. Specially crafted long date and time input, currency, repeat data and long timezone names could cause the PostgreSQL serv...
PostgreSQL < 7.2.3 Multiple Vulnerabilities
Binary data 1892.prm...
PostgreSQL < 7.2.3 Multiple Vulnerabilities (2) (deprecated)
Binary data 1893.prm...
Mandrake Linux Security Advisory : postgresql (MDKSA-2002:062-1)
Vulnerabilities were discovered in the Postgresql relational database by Mordred Labs. These vulnerabilities are buffer overflows in the rpad, lpad, repeat, and cashwords functions. The Postgresql developers also fixed a buffer overflow in functions that deal with time/date and timezone. Finally,...
RHEL 2.1 : postgresql (RHSA-2002:301)
Updated PostgreSQL packages are available which correct several minor security vulnerabilities. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 PostgreSQL is an advanced Object-Relational database management system DBMS. Red Hat Linux Advanced Server 2.1 shipped with...
PostgreSQL < 7.2.3 Multiple Vulnerabilities
The remote PostgreSQL server, according to its version number, is vulnerable to various flaws which may allow an attacker who has the rights to query the remote database to obtain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2002-1401
Buffer overflows in 1 circlepoly, 2 pathencode and 3 pathadd also incorrectly identified as pathaddr for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow...
[SECURITY] [DSA 165-1] New PostgreSQL packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2002 http://www.debian.org/security/faq -...