ID de Prueba:	1.3.6.1.4.1.25623.1.0.100470
Categoría:	Databases
Título:	PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability
Resumen:	PostgreSQL is prone to a buffer-overflow vulnerability because the; application fails to perform adequate boundary checks on user-supplied data.
Descripción:	Summary: PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Vulnerability Impact: Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash the affected application. Affected Software/OS: PostgreSQL version 8.0.x, 8.1.x, 8.3.x is vulnerable. Other versions may also be affected. Solution: Updates are available. Please see the references for more information. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 37973 Common Vulnerability Exposure (CVE) ID: CVE-2010-0442 http://www.securityfocus.com/bid/37973 Debian Security Information: DSA-2051 (Google Search) http://www.debian.org/security/2010/dsa-2051 http://www.mandriva.com/security/advisories?name=MDVSA-2010:103 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058 http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html http://www.openwall.com/lists/oss-security/2010/01/27/5 http://archives.postgresql.org/pgsql-committers/2010-01/msg00125.php http://archives.postgresql.org/pgsql-hackers/2010-01/msg00634.php https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9720 http://www.redhat.com/support/errata/RHSA-2010-0427.html http://www.redhat.com/support/errata/RHSA-2010-0428.html http://www.redhat.com/support/errata/RHSA-2010-0429.html http://securitytracker.com/id?1023510 http://secunia.com/advisories/39566 http://secunia.com/advisories/39820 http://secunia.com/advisories/39939 http://ubuntu.com/usn/usn-933-1 http://www.vupen.com/english/advisories/2010/1022 http://www.vupen.com/english/advisories/2010/1197 http://www.vupen.com/english/advisories/2010/1207 http://www.vupen.com/english/advisories/2010/1221 XForce ISS Database: postgresql-substring-bo(55902) https://exchange.xforce.ibmcloud.com/vulnerabilities/55902
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.