CVE-2003-0901

Buffer overflow in toascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code...

teapop SQL injection

SQL injection is possible during authentication if postgresql or mysql is used...

Important: Red Hat Security Advisory: postgresql security update

Updated PostgreSQL packages are available which correct several minor security vulnerabilities. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 PostgreSQL is an advanced Object-Relational database management system DBMS. Red Hat Linux Advanced Server 2.1 shipped with...

Important: Red Hat Security Advisory: : Updated PostgreSQL packages fix buffer overrun vulnerabilities

Updated PostgreSQL packages are available for Red Hat Linux 6.2, 7, 7.1, and 7.2 where we have backported a number of security fixes. A separate advisory deals with updated PostgreSQL packages for Red Hat Linux 7.3 and 8.0. PostgreSQL is an advanced Object-Relational database management system...

CVE-2002-0972

Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions 1 lpad or 2 rpad...

CVE-2000-1199

PostgreSQL stores usernames and passwords in plaintext in 1 pgshadow and 2 pgpwd, which allows attackers with sufficient privileges to gain access to databases...

CVE-2000-1199

PostgreSQL stores usernames and passwords in plaintext in 1 pgshadow and 2 pgpwd, which allows attackers with sufficient privileges to gain access to databases...

Postgresql cleartext password storage

Hi, While migrating some postgres databases to a different server including user accounts i noticed the following problem in the way postgres stores user passwords: SmellyCat:/var/postgres/data strings pgshadow someaccountname someaccountpassword anotheraccountname anotheraccountpassword...