CERTA-2006-AVI-024
Vulnerability from certfr_avis - Published: 2006-01-13 - Updated: 2006-01-13
Un vulnérabilité présente dans PostgreSQL pour Windows permet à un utilisateur distant mal intentionné de provoquer un déni de service.
Description
Une erreur dans la mise en œuvre de la gestion de nombreuses connexions concurrentes à la base de données dans PostgreSQL permet à un utilisateur distant mal intentionné de provoquer un déni de service par le biais d'un grand nombre de connexions simultanées sur le service vulnérable.
Solution
Les versions 8.1.2 pour la branche 8.1 et 8.0.6 pour la branche 8.0 corrigent le problème :
http://www.postgresql.org/ftp/
None
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| PostgreSQL | PostgreSQL | PostgreSQL pour Windows versions 8.1.1 et antérieures ; | ||
| PostgreSQL | PostgreSQL | PostgreSQL pour Windows versions 8.0.5 et antérieures. |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PostgreSQL pour Windows versions 8.1.1 et ant\u00e9rieures ;",
"product": {
"name": "PostgreSQL",
"vendor": {
"name": "PostgreSQL",
"scada": false
}
}
},
{
"description": "PostgreSQL pour Windows versions 8.0.5 et ant\u00e9rieures.",
"product": {
"name": "PostgreSQL",
"vendor": {
"name": "PostgreSQL",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nUne erreur dans la mise en \u0153uvre de la gestion de nombreuses connexions\nconcurrentes \u00e0 la base de donn\u00e9es dans PostgreSQL permet \u00e0 un\nutilisateur distant mal intentionn\u00e9 de provoquer un d\u00e9ni de service par\nle biais d\u0027un grand nombre de connexions simultan\u00e9es sur le service\nvuln\u00e9rable.\n\n## Solution\n\nLes versions 8.1.2 pour la branche 8.1 et 8.0.6 pour la branche 8.0\ncorrigent le probl\u00e8me :\n\n http://www.postgresql.org/ftp/\n",
"cves": [],
"initial_release_date": "2006-01-13T00:00:00",
"last_revision_date": "2006-01-13T00:00:00",
"links": [
{
"title": "Site de PostgreSQL :",
"url": "http://www.postgresql.org"
},
{
"title": "Liste des changements inclus dans les versions 8.1.2 et 8.0.6 de PostgreSQL :",
"url": "http://www.postgresql.org/about/news.456"
}
],
"reference": "CERTA-2006-AVI-024",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2006-01-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "Un vuln\u00e9rabilit\u00e9 pr\u00e9sente dans PostgreSQL pour Windows permet \u00e0 un\nutilisateur distant mal intentionn\u00e9 de provoquer un d\u00e9ni de service.\n",
"title": "Vuln\u00e9rabilit\u00e9 de PostgreSQL pour Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Liste des changements inclus dans les versions 8.1.2 et 8.0.6 de PostgreSQL",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…