NVD

Id
52780  
Name
CVE-2007-0556  
Description
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-02-05  
Modified Date
2011-03-07  
Seq
2007-0556  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266772 52780 CVE-2007-0556 FEDORA-2007-198  View
266773 52780 CVE-2007-0556 [security-announce] 20070206 rPSA-2007-0025-1 postgresql postgresql-server  View
266774 52780 CVE-2007-0556 oval:org.mitre.oval:def:11353  View
266775 52780 CVE-2007-0556 GLSA-200703-15  View
266776 52780 CVE-2007-0556 1017597  View
266777 52780 CVE-2007-0556 102825  View
266778 52780 CVE-2007-0556 http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm  View
266779 52780 CVE-2007-0556 MDKSA-2007:037  View
266780 52780 CVE-2007-0556 SUSE-SR:2007:010  View
266781 52780 CVE-2007-0556 http://www.postgresql.org/support/security  View
266782 52780 CVE-2007-0556 RHSA-2007:0067  View
266783 52780 CVE-2007-0556 RHSA-2007:0068  View
266784 52780 CVE-2007-0556 20070206 rPSA-2007-0025-1 postgresql postgresql-server  View
266785 52780 CVE-2007-0556 20070208 rPSA-2007-0025-2 postgresql postgresql-server  View
266786 52780 CVE-2007-0556 22387  View
266787 52780 CVE-2007-0556 2007-0007  View
266788 52780 CVE-2007-0556 USN-417-2  View
266789 52780 CVE-2007-0556 USN-417-1  View
266790 52780 CVE-2007-0556 ADV-2007-0478  View
266791 52780 CVE-2007-0556 ADV-2007-0774  View
266792 52780 CVE-2007-0556 postgresql-datatype-information-disclosure(32191)  View
266793 52780 CVE-2007-0556 https://issues.rpath.com/browse/RPL-1025  View
266794 52780 CVE-2007-0556 https://issues.rpath.com/browse/RPL-830  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51457 JVNDB-2007-000119 PostgreSQL のクエリプランナにおけるサービス運用妨害 (DoS) の脆弱性 PostgreSQL には、クエリプランナにおいて特定の検証処理を行わないため、PostgreSQL がクラッシュする、あるいは ALTER COLUMN TYPE ステートメントの実行によりサーバ上の任意のメモリ読み出しが可能となる脆弱性が存在します。 CVE-2007-0556 23911 CVE-2007-0556 52780 6.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000119.html 2007-02-05 2007-04-01 View