PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

SunOS 5.10_x86: PostgreSQL 8.3 core patch.
Date this patch was last updated by Sun : Mar/29/13

SunOS 5.10_x86: PostgreSQL 8.2 core patch.
Date this patch was last updated by Sun : Jun/09/11

SunOS 5.10_x86: PostgreSQL patch.
Date this patch was last updated by Sun : Jan/14/10

SunOS 5.10: PostgreSQL 8.3 core patch.
Date this patch was last updated by Sun : Mar/29/13

SunOS 5.10: PostgreSQL 8.2 core patch.
Date this patch was last updated by Sun : Jun/09/11

SunOS 5.10: PostgreSQL patch.
Date this patch was last updated by Sun : Jan/14/10

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1484 advisory.

    [8.1.18-2.el5_4.1]
    - Remove unnecessary .o file that confuses TPS tests     Related: #525284

    [8.1.18-1.el5_4.1]
    - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230,       and assorted other bugs described at       http://www.postgresql.org/docs/8.1/static/release.html     Resolves: #525284

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2009-0922 postgresql: potential DoS due to conversion functions

CVE-2009-3230 postgresql: SQL privilege escalation, incomplete fix for

CVE-2007-6600

It was discovered that the upstream patch for CVE-2007-6600 included in the Scientific Linux did not include protection against misuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. An authenticated user could use this flaw to install malicious code that would later execute with superuser privileges. (CVE-2009-3230)

A flaw was found in the way PostgreSQL handled encoding conversion. A remote, authenticated user could trigger an encoding conversion failure, possibly leading to a temporary denial of service. Note: To exploit this issue, a locale and client encoding for which specific messages fail to translate must be selected (the availability of these is determined by an administrator-defined locale setting).
(CVE-2009-0922)

Note: For Scientific Linux 4, this update upgrades PostgreSQL to version 7.4.26. For Scientific Linux 5, this update upgrades PostgreSQL to version 8.1.18. Refer to the PostgreSQL Release Notes for a list of changes :

http://www.postgresql.org/docs/7.4/static/release.html http://www.postgresql.org/docs/8.1/static/release.html

If the postgresql service is running, it will be automatically restarted after installing this update.

The remote host is affected by the vulnerability described in GLSA-201110-22 (PostgreSQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PostgreSQL. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote authenticated attacker could send a specially crafted SQL query       to a PostgreSQL server with the 'intarray' module enabled, possibly       resulting in the execution of arbitrary code with the privileges of the       PostgreSQL server process, or a Denial of Service condition. Furthermore,       a remote authenticated attacker could execute arbitrary Perl code, cause       a Denial of Service condition via different vectors, bypass LDAP       authentication, bypass X.509 certificate validation, gain database       privileges, exploit weak blowfish encryption and possibly cause other       unspecified impact.
  Workaround :

    There is no known workaround at this time.

Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

PostgreSQL is an advanced object-relational database management system (DBMS).

It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0038 did not include protection against misuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. An authenticated user could use this flaw to install malicious code that would later execute with superuser privileges. (CVE-2009-3230)

A flaw was found in the way PostgreSQL handled encoding conversion. A remote, authenticated user could trigger an encoding conversion failure, possibly leading to a temporary denial of service. Note: To exploit this issue, a locale and client encoding for which specific messages fail to translate must be selected (the availability of these is determined by an administrator-defined locale setting).
(CVE-2009-0922)

Note: For Red Hat Enterprise Linux 4, this update upgrades PostgreSQL to version 7.4.26. For Red Hat Enterprise Linux 5, this update upgrades PostgreSQL to version 8.1.18. Refer to the PostgreSQL Release Notes for a list of changes :

http://www.postgresql.org/docs/7.4/static/release.html http://www.postgresql.org/docs/8.1/static/release.html

All PostgreSQL users should upgrade to these updated packages, which resolve these issues. If the postgresql service is running, it will be automatically restarted after installing this update.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1484 advisory.

    PostgreSQL is an advanced object-relational database management system     (DBMS).

    It was discovered that the upstream patch for CVE-2007-6600 included in the     Red Hat Security Advisory RHSA-2008:0038 did not include protection against     misuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. An     authenticated user could use this flaw to install malicious code that would     later execute with superuser privileges. (CVE-2009-3230)

    A flaw was found in the way PostgreSQL handled encoding conversion. A     remote, authenticated user could trigger an encoding conversion failure,     possibly leading to a temporary denial of service. Note: To exploit this     issue, a locale and client encoding for which specific messages fail to     translate must be selected (the availability of these is determined by an     administrator-defined locale setting). (CVE-2009-0922)

    Note: For Red Hat Enterprise Linux 4, this update upgrades PostgreSQL to     version 7.4.26. For Red Hat Enterprise Linux 5, this update upgrades     PostgreSQL to version 8.1.18. Refer to the PostgreSQL Release Notes for a     list of changes:

    http://www.postgresql.org/docs/7.4/static/release.html     http://www.postgresql.org/docs/8.1/static/release.html

    All PostgreSQL users should upgrade to these updated packages, which     resolve these issues. If the postgresql service is running, it will be     automatically restarted after installing this update.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding.
(CVE-2009-0922)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding (CVE-2009-0922).

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests (CVE-2009-0922).

This update provides a fix for this vulnerability.

It was discovered that PostgreSQL did not properly handle encoding conversion failures. An attacker could exploit this by sending specially crafted requests to PostgreSQL, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to PostgreSQL 8.3.7, for various fixes described at http://www.postgresql.org/docs/8.3/static/release-8-3-7.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This version of PostgreSQL is vulnerable to a denial of service when processing malformed SQL statements.  To exploit this flaw, an attacker would need a valid account and the ability to execute custom queries.  Successful exploitation would result in the attacker shutting down the database.

ID	Name	Product	Family	Severity
108005	Solaris 10 (x86) : 138827-12	Nessus	Solaris Local Security Checks	medium
107978	Solaris 10 (x86) : 136999-10	Nessus	Solaris Local Security Checks	medium
107893	Solaris 10 (x86) : 123591-12	Nessus	Solaris Local Security Checks	medium
107507	Solaris 10 (sparc) : 138826-12	Nessus	Solaris Local Security Checks	medium
107480	Solaris 10 (sparc) : 136998-10	Nessus	Solaris Local Security Checks	medium
107391	Solaris 10 (sparc) : 123590-12	Nessus	Solaris Local Security Checks	medium
67936	Oracle Linux 5 : postgresql (ELSA-2009-1484)	Nessus	Oracle Linux Local Security Checks	medium
60675	Scientific Linux Security Update : postgresql on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
56626	GLSA-201110-22 : PostgreSQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
43800	CentOS 4 / 5 : postgresql (CESA-2009:1484)	Nessus	CentOS Local Security Checks	medium
42064	RHEL 4 / 5 : postgresql (RHSA-2009:1484)	Nessus	Red Hat Local Security Checks	medium
41579	SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 6114)	Nessus	SuSE Local Security Checks	medium
41450	SuSE 11 Security Update : PostgreSQL (SAT Patch Number 674)	Nessus	SuSE Local Security Checks	medium
41288	SuSE9 Security Update : PostgreSQL (YOU Patch Number 12383)	Nessus	SuSE Local Security Checks	medium
40299	openSUSE Security Update : postgresql (postgresql-675)	Nessus	SuSE Local Security Checks	medium
40113	openSUSE Security Update : postgresql (postgresql-675)	Nessus	SuSE Local Security Checks	medium
37346	Mandriva Linux Security Advisory : postgresql (MDVSA-2009:079)	Nessus	Mandriva Local Security Checks	medium
37152	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : postgresql-8.1, postgresql-8.3 vulnerability (USN-753-1)	Nessus	Ubuntu Local Security Checks	medium
36811	Fedora 10 : postgresql-8.3.7-1.fc10 (2009-2959)	Nessus	Fedora Local Security Checks	medium
36169	openSUSE 10 Security Update : postgresql (postgresql-6115)	Nessus	SuSE Local Security Checks	medium
35995	Fedora 9 : postgresql-8.3.7-1.fc9 (2009-2927)	Nessus	Fedora Local Security Checks	medium
4957	PostgreSQL Error Message Conversion Remote DoS	Nessus Network Monitor	Database	medium

Detections

Analytics

CVE-2009-0922

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium