CVE - CVE-2007-0555

CVE-ID
CVE-2007-0555	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20070206 rPSA-2007-0025-1 postgresql postgresql-server URL:http://www.securityfocus.com/archive/1/459280/100/0/threaded BUGTRAQ:20070208 rPSA-2007-0025-2 postgresql postgresql-server URL:http://www.securityfocus.com/archive/1/459448/100/0/threaded MLIST:[security-announce] 20070206 rPSA-2007-0025-1 postgresql postgresql-server URL:http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html CONFIRM:http://www.postgresql.org/support/security CONFIRM:https://issues.rpath.com/browse/RPL-830 CONFIRM:https://issues.rpath.com/browse/RPL-1025 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm DEBIAN:DSA-1261 URL:http://www.debian.org/security/2007/dsa-1261 FEDORA:FEDORA-2007-198 URL:http://fedoranews.org/cms/node/2554 GENTOO:GLSA-200703-15 URL:http://security.gentoo.org/glsa/glsa-200703-15.xml MANDRIVA:MDKSA-2007:037 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:037 REDHAT:RHSA-2007:0064 URL:http://www.redhat.com/support/errata/RHSA-2007-0064.html REDHAT:RHSA-2007:0067 URL:http://www.redhat.com/support/errata/RHSA-2007-0067.html REDHAT:RHSA-2007:0068 URL:http://www.redhat.com/support/errata/RHSA-2007-0068.html SGI:20070201-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc SUNALERT:102825 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1 SUSE:SUSE-SR:2007:010 URL:http://www.novell.com/linux/security/advisories/2007_10_sr.html TRUSTIX:2007-0007 URL:http://www.trustix.org/errata/2007/0007 UBUNTU:USN-417-1 URL:https://usn.ubuntu.com/417-1/ UBUNTU:USN-417-2 URL:http://www.ubuntu.com/usn/usn-417-2 BID:22387 URL:http://www.securityfocus.com/bid/22387 OVAL:oval:org.mitre.oval:def:9739 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9739 VUPEN:ADV-2007-0478 URL:http://www.vupen.com/english/advisories/2007/0478 VUPEN:ADV-2007-0774 URL:http://www.vupen.com/english/advisories/2007/0774 OSVDB:33087 URL:http://osvdb.org/33087 SECTRACK:1017597 URL:http://securitytracker.com/id?1017597 SECUNIA:24033 URL:http://secunia.com/advisories/24033 SECUNIA:24028 URL:http://secunia.com/advisories/24028 SECUNIA:24057 URL:http://secunia.com/advisories/24057 SECUNIA:24050 URL:http://secunia.com/advisories/24050 SECUNIA:24042 URL:http://secunia.com/advisories/24042 SECUNIA:24094 URL:http://secunia.com/advisories/24094 SECUNIA:24151 URL:http://secunia.com/advisories/24151 SECUNIA:24158 URL:http://secunia.com/advisories/24158 SECUNIA:24315 URL:http://secunia.com/advisories/24315 SECUNIA:24513 URL:http://secunia.com/advisories/24513 SECUNIA:24577 URL:http://secunia.com/advisories/24577 SECUNIA:25220 URL:http://secunia.com/advisories/25220 SECUNIA:24284 URL:http://secunia.com/advisories/24284 XF:postgresql-sqlfunctions-info-disclosure(32195) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/32195
Assigning CNA
N/A
Date Entry Created
20070129	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070129)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.