Rapid7 Vulnerability & Exploit Database

CESA-2007:0064: postgresql security update

Back to Search

CESA-2007:0064: postgresql security update

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:N/A:C)
Published
02/05/2007
Created
07/25/2018
Added
03/12/2010
Modified
07/04/2017

Description

Updated postgresql packages that fix two security issues are now available for CentOS Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

PostgreSQL is an advanced Object-Relational database management system (DBMS). A flaw was found in the way the PostgreSQL server handles certain SQL-language functions. An authenticated user could execute a sequence of commands which could crash the PostgreSQL server or possibly read from arbitrary memory locations. A user would need to have permissions to drop and add database tables to be able to exploit this issue (CVE-2007-0555). A denial of service flaw was found affecting the PostgreSQL server running on CentOS Linux 4 systems. An authenticated user could execute an SQL command which could crash the PostgreSQL server. (CVE-2006-5540) Users of PostgreSQL should upgrade to these updated packages containing PostgreSQL version 7.4.16 or 7.3.18, which correct these issues.

Solution(s)

  • centos-upgrade-postgresql
  • centos-upgrade-postgresql-contrib
  • centos-upgrade-postgresql-devel
  • centos-upgrade-postgresql-docs
  • centos-upgrade-postgresql-jdbc
  • centos-upgrade-postgresql-libs
  • centos-upgrade-postgresql-pl
  • centos-upgrade-postgresql-python
  • centos-upgrade-postgresql-server
  • centos-upgrade-postgresql-tcl
  • centos-upgrade-postgresql-test
  • centos-upgrade-rh-postgresql
  • centos-upgrade-rh-postgresql-contrib
  • centos-upgrade-rh-postgresql-devel
  • centos-upgrade-rh-postgresql-docs
  • centos-upgrade-rh-postgresql-jdbc
  • centos-upgrade-rh-postgresql-libs
  • centos-upgrade-rh-postgresql-pl
  • centos-upgrade-rh-postgresql-python
  • centos-upgrade-rh-postgresql-server
  • centos-upgrade-rh-postgresql-tcl
  • centos-upgrade-rh-postgresql-test

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;