Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-568-1
HistoryJan 14, 2008 - 12:00 a.m.

PostgreSQL vulnerabilities

2008-01-1400:00:00
ubuntu.com
40

10 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.5%

JSON

Releases

  • Ubuntu 7.10
  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • postgresql-8.1 -
  • postgresql-8.2 -

Details

Nico Leidecker discovered that PostgreSQL did not properly
restrict dblink functions. An authenticated user could exploit
this flaw to access arbitrary accounts and execute arbitrary
SQL queries. (CVE-2007-3278, CVE-2007-6601)

It was discovered that the TCL regular expression parser used
by PostgreSQL did not properly check its input. An attacker
could send crafted regular expressions to PostgreSQL and cause
a denial of service via resource exhaustion or database crash.
(CVE-2007-4769, CVE-2007-4772, CVE-2007-6067)

It was discovered that PostgreSQL executed VACUUM and ANALYZE
operations within index functions with superuser privileges and
also allowed SET ROLE and SET SESSION AUTHORIZATION within index
functions. A remote authenticated user could exploit these flaws
to gain privileges. (CVE-2007-6600)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchpostgresql-8.2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibecpg-compat2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibecpg-dev< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibecpg5< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibpgtypes2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibpq-dev< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibpq5< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchpostgresql-client-8.2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchpostgresql-contrib-8.2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchpostgresql-plperl-8.2< 8.2.6-0ubuntu0.7.10.1UNKNOWN
Rows per page:
1-10 of 521

Related

osv 2
openvas 81
nessus 44
debian 2
redhat 7
gentoo 1
oraclelinux 4
centos 7
securityvulns 6
fedora 4
suse 5
freebsd 1
veracode 7
prion 8
ubuntucve 8
cve 8
postgresql 3
ubuntu 1
osv
osv
postgresql-7.4 - several
2008-01-14 00:00:00
postgresql-8.1 - several
2008-01-13 00:00:00
openvas
openvas
CentOS Update for postgresql CESA-2008:0038 centos4 i386
2009-02-27 00:00:00
Debian Security Advisory DSA 1463-1 (postgresql-7.4)
2008-01-31 00:00:00
Mandriva Update for postgresql MDVSA-2008:004 (postgresql)
2009-04-09 00:00:00
nessus
nessus
GLSA-200801-15 : PostgreSQL: Multiple vulnerabilities
2008-01-29 00:00:00
Debian DSA-1460-1 : postgresql-8.1 - several vulnerabilities
2008-01-14 00:00:00
Debian DSA-1463-1 : postgresql-7.4 - several vulnerabilities
2008-01-15 00:00:00
debian
debian
[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
2008-01-14 18:51:52
[SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
2008-01-13 15:45:01
redhat
redhat
(RHSA-2008:0040) Moderate: postgresql security update
2008-02-01 00:00:00
(RHSA-2008:0038) Moderate: postgresql security update
2008-01-11 00:00:00
(RHSA-2008:0039) Moderate: postgresql security update
2008-01-11 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2008-01-29 00:00:00
oraclelinux
oraclelinux
Moderate: postgresql security update
2008-01-11 00:00:00
tcl security and bug fix update
2013-01-11 00:00:00
Moderate: postgresql security update
2008-01-11 00:00:00
centos
centos
postgresql security update
2008-01-11 15:27:05
rh security update
2008-01-11 14:31:56
tcl security update
2013-01-09 20:44:22
securityvulns
securityvulns
PostgreSQL 2007-01-07 Cumulative Security Release
2008-01-08 00:00:00
PostgreSQL database server multiple security vulnerabilities
2008-01-08 00:00:00
PostgreSQL dblink library multiple security vulnerabilities
2007-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: postgresql-8.2.6-1.fc8
2008-01-11 22:14:38
[SECURITY] Fedora 7 Update: postgresql-8.2.6-1.fc7
2008-01-11 22:24:42
[SECURITY] Fedora 11 Update: postgresql-8.3.8-1.fc11
2009-09-11 23:21:13
suse
suse
remote code execution in postgresql
2008-02-06 10:24:49
Security update for postgresql93 (important)
2016-02-21 11:11:04
Security update for postgresql93 (important)
2016-02-22 14:11:16
freebsd
freebsd
postgresql -- multiple vulnerabilities
2008-01-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:45:32
Privilege Escalation
2020-04-10 00:19:40
Denial Of Service (DoS)
2020-04-10 00:19:39
prion
prion
Authentication flaw
2008-01-09 21:46:00
Sql injection
2007-06-19 21:30:00
Design/Logic Flaw
2008-01-09 21:46:00
ubuntucve
ubuntucve
CVE-2007-6601
2008-01-09 00:00:00
CVE-2007-6067
2008-01-09 00:00:00
CVE-2007-4769
2008-01-09 00:00:00
cve
cve
CVE-2007-6601
2008-01-09 21:46:00
CVE-2007-6067
2008-01-09 21:46:00
CVE-2007-4769
2008-01-09 21:46:00
postgresql
postgresql
Vulnerability in core server (CVE-2007-4769)
2008-01-09 21:46:00
Vulnerability in core server (CVE-2007-6600)
2008-01-09 21:46:00
Vulnerability in contrib module (CVE-2007-6601)
2008-01-09 21:46:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2009-09-21 00:00:00

10 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.5%

JSON
Related for USN-568-1
osv2openvas81nessus44debian2redhat7gentoo1oraclelinux4centos7securityvulns6fedora4suse5freebsd1veracode7prion8ubuntucve8cve8postgresql3ubuntu1