Vulnerability Assessment & Network Security Forums
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.
Vulnerability Assessment Details
Detailed Explanation for this Vulnerability Assessment
These remote packages are missing security patches :
The execution of custom PostgreSQL functions can be restricted with
the EXECUTE privilege. However, previous versions did not check this
privilege when executing a function which was part of an aggregate.
As a result, any database user could circumvent the EXECUTE restriction of
functions with a particular (but very common) parameter structure by
creating an aggregate wrapper around the function. (CVE-2005-0244)
Several buffer overflows have been discovered in the SQL parser. These
could be exploited by any database user to crash the PostgreSQL server
or execute arbitrary code with the rights of the server.
Finally, this update fixes a Denial of Service vulnerability of the
contributed "intagg" module. By constructing specially crafted arrays,
a database user was able to corrupt and crash the PostgreSQL server.
(CVE-2005-0246). Please note that this module is part of the
"postgresql-contrib" package, which is not officially supported by
Upgrade to :
- libecpg-dev-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- libecpg4-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- libpgtcl-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- libpgtcl-dev-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- libpq3-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- postgresql-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- postgresql-client-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- postgresql-contrib-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- postgresql-dev-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
- postgresql-doc-7.4.5-3ubuntu0.4 (Ubuntu 4.10)
Network Security Threat Level: High
Networks Security ID:
Vulnerability Assessment Copyright: Ubuntu Security Notice (C) 2005 Canonical, Inc. / NASL script (C) 2005 Michel Arboi
|OEM Genuine Lightning USB charger Cable for Apple iPhone 5 5S 5C 6 6plus MD818
|OEM Genuine Apple iBook PowerBook G4 45W AC Adapter Charger Power Supply
|OEM Genuine Original Apple 12W USB Wall Charger w/ 30pin Cable for iPad 1/2/3
|Genuine OEM Apple Battery A1377 - 2010 Macbook Air 13" - 661-5731 - 97 Cycles
No Discussions have been posted on this vulnerability.