CVE-2006-5541
MEDIUM severity · CVSS 4
4CVSS MEDIUM
Summary
backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impactNone
Availability impact—
Exploit probability (EPSS)2%
AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://projects.commandprompt.com/public/pgsql/changeset/26457
- http://secunia.com/advisories/22562
- http://secunia.com/advisories/22584
- http://secunia.com/advisories/22606
- http://secunia.com/advisories/22636
- http://secunia.com/advisories/23048
- http://secunia.com/advisories/23132
- http://secunia.com/advisories/24577