Search for packages
purl | pkg:generic/postgresql@8.0.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-1cdq-g1ar-aaab
Aliases: CVE-2005-0227 |
PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension. |
Affected by 0 other vulnerabilities. |
VCID-2jth-1dr6-aaam
Aliases: CVE-2010-1170 |
CVE-2010-1170 PostgreSQL: PL/Tcl Intended restriction bypass |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-3bpd-gr68-aaar
Aliases: CVE-2009-4136 |
CVE-2009-4136 postgresql: SQL privilege escalation via modifications to session-local state |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-4ks5-5tdd-aaah
Aliases: CVE-2006-0678 |
PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553. |
Affected by 0 other vulnerabilities. |
VCID-5m2y-3z62-aaan
Aliases: CVE-2010-3433 |
CVE-2010-3433 PostgreSQL (PL/Perl, PL/Tcl): SECURITY DEFINER function keyword bypass |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-8egf-4d5f-aaar
Aliases: CVE-2005-0244 |
PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command. |
Affected by 0 other vulnerabilities. |
VCID-8wfu-qt9c-aaan
Aliases: CVE-2007-6600 |
CVE-2007-6600 PostgreSQL privilege escalation |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-a57d-1aph-aaam
Aliases: CVE-2005-1409 |
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability." |
Affected by 0 other vulnerabilities. |
VCID-dd13-v3tv-aaar
Aliases: CVE-2009-4034 |
CVE-2009-4034 postgresql: incorrect verification of SSL certificates with NUL in name |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-etsm-dp2j-aaab
Aliases: CVE-2007-0556 |
CVE-2007-0556 security flaw |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-f4gy-j2zx-aaae
Aliases: CVE-2009-0922 |
CVE-2009-0922 postgresql: potential DoS due to conversion functions |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-h44v-ttyu-aaaf
Aliases: CVE-2005-1410 |
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments. |
Affected by 0 other vulnerabilities. |
VCID-hw3n-46qm-aaad
Aliases: CVE-2005-0245 |
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247. |
Affected by 0 other vulnerabilities. |
VCID-k3qn-79y2-aaam
Aliases: CVE-2007-6601 |
CVE-2007-6601 PostgreSQL privilege escalation via dblink |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-knew-ww8s-aaam
Aliases: CVE-2006-2313 |
CVE-2006-2313 security flaw |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-n16a-1zg1-aaap
Aliases: CVE-2007-2138 |
CVE-2007-2138 PostgreSQL security-definer function privilege escalation |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-n7bj-qfrx-aaac
Aliases: CVE-2005-0246 |
The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays. |
Affected by 0 other vulnerabilities. |
VCID-nysv-6y7a-aaaq
Aliases: CVE-2006-5541 |
CVE-2006-5541 security flaw |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-qd91-d7x3-aaar
Aliases: CVE-2007-0555 |
CVE-2007-0555 security flaw |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-t2g8-v7u9-aaae
Aliases: CVE-2006-2314 |
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-vkdr-1ajs-aaaa
Aliases: CVE-2010-1169 |
CVE-2010-1169 PostgreSQL: PL/Perl Intended restriction bypass |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-w6z5-afev-aaam
Aliases: CVE-2009-3230 |
CVE-2009-3230 postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600 |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-x1ga-wvpr-aaan
Aliases: CVE-2007-4769 |
CVE-2007-4769 postgresql integer overflow in regex code |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-xzy3-8e53-aaaf
Aliases: CVE-2010-1975 |
CVE-2010-1975 postgresql: improper privilege check during certain RESET ALL operations |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-zxng-yspq-aaak
Aliases: CVE-2005-0247 |
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |