Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | |||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.56268 |
Kategorie: | FreeBSD Local Security Checks |
Titel: | FreeBSD Ports: postgresql |
Zusammenfassung: | NOSUMMARY |
Beschreibung: | Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: postgresql CVE-2005-1409 PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the 'Character conversion vulnerability.' CVE-2005-1410 The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as 'internal' even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments. Solution: Update your system with the appropriate patches or software upgrades. http://www.postgresql.org/about/news.315 http://www.vuxml.org/freebsd/486aff57-9ecd-11da-b410-000e0c2e438a.html CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P |
Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2005-1409 BugTraq ID: 13476 http://www.securityfocus.com/bid/13476 http://www.securityfocus.com/archive/1/426302/30/6680/threaded http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676 http://www.redhat.com/support/errata/RHSA-2005-433.html SuSE Security Announcement: SUSE-SA:2005:036 (Google Search) http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.vupen.com/english/advisories/2005/0453 Common Vulnerability Exposure (CVE) ID: CVE-2005-1410 BugTraq ID: 13475 http://www.securityfocus.com/bid/13475 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1086 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9343 |
Copyright | Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com |
Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |