NVD

Id
61016  
Name
CVE-2006-2314  
Description
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-24  
Modified Date
2011-03-07  
Seq
2006-2314  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315121 61016 CVE-2006-2314 20060602-01-U  View
315122 61016 CVE-2006-2314 [pgsql-announce] 20060523 Security Releases for All Active Versions  View
315123 61016 CVE-2006-2314 SUSE-SA:2006:030  View
315124 61016 CVE-2006-2314 oval:org.mitre.oval:def:9947  View
315125 61016 CVE-2006-2314 GLSA-200607-04  View
315126 61016 CVE-2006-2314 1016142  View
315127 61016 CVE-2006-2314 http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm  View
315128 61016 CVE-2006-2314 DSA-1087  View
315129 61016 CVE-2006-2314 MDKSA-2006:098  View
315130 61016 CVE-2006-2314 SUSE-SR:2006:021  View
315131 61016 CVE-2006-2314 http://www.postgresql.org/docs/techdocs.50  View
315132 61016 CVE-2006-2314 RHSA-2006:0526  View
315133 61016 CVE-2006-2314 20060523 PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15  View
315134 61016 CVE-2006-2314 20060524 rPSA-2006-0080-1 postgresql postgresql-server  View
315135 61016 CVE-2006-2314 18092  View
315136 61016 CVE-2006-2314 2006-0032  View
315137 61016 CVE-2006-2314 USN-288-2  View
315138 61016 CVE-2006-2314 USN-288-3  View
315139 61016 CVE-2006-2314 USN-288-1  View
315140 61016 CVE-2006-2314 ADV-2006-1941  View
315141 61016 CVE-2006-2314 postgresql-multibyte-sql-injection(26627)  View
315142 61016 CVE-2006-2314 postgresql-ascii-sql-injection(26628)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58110 JVNDB-2006-000306 PostgreSQL における特定のマルチバイト文字コードによる SQL インジェクションの脆弱性 ------------ CVE-2006-2314 18416 CVE-2006-2314 61016 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000306.html 2006-05-23 2009-12-18 View