| Vulnerability Name: | CVE-2007-0555 (CCN-32195) | ||||||||||||||||||||||||||||
| Assigned: | 2007-02-05 | ||||||||||||||||||||||||||||
| Published: | 2007-02-05 | ||||||||||||||||||||||||||||
| Updated: | 2023-01-19 | ||||||||||||||||||||||||||||
| Summary: | PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content. | ||||||||||||||||||||||||||||
| CVSS v3 Severity: | 4.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L)
| ||||||||||||||||||||||||||||
| CVSS v2 Severity: | 8.5 High (CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:N/A:C) 6.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:N/A:C/E:U/RL:OF/RC:C)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||||||||||||||||||
| References: | Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: MITRE Type: CNA CVE-2007-0555 Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Broken Link cve@mitre.org Source: CCN Type: RHSA-2007-0064 Moderate: postgresql security update Source: CCN Type: RHSA-2007-0067 Moderate: postgresql security update Source: CCN Type: RHSA-2007-0068 Moderate: postgresql security update Source: CCN Type: SA24033 PostgreSQL Denial of Service and Information Disclosure Source: CCN Type: SA24315 Solaris PostgreSQL Denial of Service and Information Disclosure Source: CCN Type: SA24577 Avaya Products PostgreSQL Denial of Service and Information Disclosure Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: CCN Type: SECTRACK ID: 1017597 PostgreSQL Data Type Check Bypass and Table Column Modification Bugs Let Remote Users Deny Service Source: cve@mitre.org Type: Third Party Advisory, VDB Entry cve@mitre.org Source: CCN Type: Sun Alert ID: 102825 Two Security Vulnerabilities in PostgreSQL May Allow Denial of Service or Information Leakage Source: cve@mitre.org Type: Broken Link cve@mitre.org Source: CCN Type: ASA-2007-107 Two Security Vulnerabilities in PostgreSQL May Allow Denial of Service or Information Leakage (Sun 102825) Source: CCN Type: ASA-2007-116 postgresql security update (RHSA-2007-0064) Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: CCN Type: ASA-2007-117 postgresql security update (RHSA-2007-0067) Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: DEBIAN Type: DSA-1261 postgresql -- several vulnerabilities Source: CCN Type: GLSA-200703-15 PostgreSQL: Multiple vulnerabilities Source: cve@mitre.org Type: Broken Link cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: CCN Type: OSVDB ID: 33087 PostgreSQL Function Argument Data Type Check Bypass Source: CCN Type: PostgreSQL Web site PostgreSQL: Security Information Source: cve@mitre.org Type: Vendor Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory, VDB Entry cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory, VDB Entry cve@mitre.org Source: CCN Type: BID-22387 PostgreSQL Information Disclosure and Denial of Service Vulnerabilities Source: cve@mitre.org Type: Third Party Advisory, VDB Entry cve@mitre.org Source: cve@mitre.org Type: Broken Link cve@mitre.org Source: CCN Type: TLSA-2007-10 PostgreSQL denial of service attack Source: CCN Type: USN-417-1 PostgreSQL vulnerabilities Source: CCN Type: USN-417-2 PostgreSQL regression Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: CCN Type: USN-417-3 PostgreSQL regression Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory, VDB Entry cve@mitre.org Source: XF Type: UNKNOWN postgresql-sqlfunctions-info-disclosure(32195) Source: cve@mitre.org Type: Broken Link cve@mitre.org Source: cve@mitre.org Type: Broken Link cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: SUSE Type: SUSE-SR:2007:010 SUSE Security Summary Report | ||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration RedHat 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||