CVE-2007-0555

Description

PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.

References

https://usn.ubuntu.com/417-1/

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9739

https://exchange.xforce.ibmcloud.com/vulnerabilities/32195

http://www.vupen.com/english/advisories/2007/0774

http://www.vupen.com/english/advisories/2007/0478

http://www.ubuntu.com/usn/usn-417-2

http://www.securityfocus.com/bid/22387

http://www.securityfocus.com/archive/1/459448/100/0/threaded

http://www.securityfocus.com/archive/1/459280/100/0/threaded

http://www.redhat.com/support/errata/RHSA-2007-0068.html

http://www.redhat.com/support/errata/RHSA-2007-0067.html

http://www.redhat.com/support/errata/RHSA-2007-0064.html

http://www.postgresql.org/support/security

http://www.novell.com/linux/security/advisories/2007_10_sr.html

http://www.debian.org/security/2007/dsa-1261

http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm

http://securitytracker.com/id?1017597

http://security.gentoo.org/glsa/glsa-200703-15.xml

http://fedoranews.org/cms/node/2554

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3