PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11,...
Vulnerability Description
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0555
Credits & Attribution
No credits recorded in the NVD database.
References
- https://issues.rpath.com/browse/RPL-1025
- http://secunia.com/advisories/24050
- http://www.securityfocus.com/bid/22387
- http://secunia.com/advisories/24513
- http://www.debian.org/security/2007/dsa-1261
- http://secunia.com/advisories/24315
- http://www.redhat.com/support/errata/RHSA-2007-0068.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9739
- http://secunia.com/advisories/24158
- http://www.securityfocus.com/archive/1/459448/100/0/threaded
- http://www.vupen.com/english/advisories/2007/0774
- http://www.securityfocus.com/archive/1/459280/100/0/threaded
- http://www.vupen.com/english/advisories/2007/0478
- http://osvdb.org/33087
- http://secunia.com/advisories/24151
- http://www.ubuntu.com/usn/usn-417-2
- http://secunia.com/advisories/24284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32195
- http://secunia.com/advisories/24577
- http://secunia.com/advisories/24033
- http://securitytracker.com/id?1017597
- https://usn.ubuntu.com/417-1/
- https://issues.rpath.com/browse/RPL-830
- http://www.novell.com/linux/security/advisories/2007_10_sr.html
- http://www.postgresql.org/support/security
- http://fedoranews.org/cms/node/2554
- http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm
- http://www.trustix.org/errata/2007/0007
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:037
- http://www.redhat.com/support/errata/RHSA-2007-0064.html
- http://www.redhat.com/support/errata/RHSA-2007-0067.html
- ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
- http://secunia.com/advisories/24057
- http://secunia.com/advisories/25220
- http://secunia.com/advisories/24042
- http://secunia.com/advisories/24028
- http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html
- http://secunia.com/advisories/24094
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1
- http://security.gentoo.org/glsa/glsa-200703-15.xml
More from postgresql
View All →Affected Vendor
postgresql
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.