Vulnerabilities > Postgresql > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-10-26 | CVE-2006-5542 | Local Denial of Service vulnerability in PostgreSQL backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements. | 4.0 |
| 2006-10-26 | CVE-2006-5540 | Local Denial of Service vulnerability in PostgreSQL backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization." | 4.0 |
| 2006-02-14 | CVE-2006-0553 | Permissions, Privileges, and Access Controls vulnerability in Postgresql 8.1.0/8.1.1/8.1.2 PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678. | 6.5 |
| 2006-01-10 | CVE-2006-0105 | Denial Of Service vulnerability in PostgreSQL Postmaster PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests. | 5.0 |
| 2005-05-02 | CVE-2005-0247 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Postgresql Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245. | 6.5 |
| 2005-05-02 | CVE-2005-0244 | Permissions, Privileges, and Access Controls vulnerability in Postgresql PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command. | 6.5 |
| 2004-08-06 | CVE-2004-0547 | Unspecified vulnerability in Postgresql 7.2.1 Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash). | 5.0 |
| 2003-01-17 | CVE-2002-1402 | Unspecified vulnerability in Postgresql Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code. | 4.6 |
| 2003-01-17 | CVE-2002-1401 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Postgresql Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow. | 6.5 |
| 2003-01-17 | CVE-2002-1398 | Unspecified vulnerability in Postgresql Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input." | 4.6 |