7.5

CVE-2006-2313

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
PostgresqlPostgresql Version7.3
PostgresqlPostgresql Version7.3.1
PostgresqlPostgresql Version7.3.2
PostgresqlPostgresql Version7.3.3
PostgresqlPostgresql Version7.3.4
PostgresqlPostgresql Version7.3.5
PostgresqlPostgresql Version7.3.6
PostgresqlPostgresql Version7.3.7
PostgresqlPostgresql Version7.3.8
PostgresqlPostgresql Version7.3.9
PostgresqlPostgresql Version7.3.10
PostgresqlPostgresql Version7.3.11
PostgresqlPostgresql Version7.3.12
PostgresqlPostgresql Version7.3.13
PostgresqlPostgresql Version7.3.14
PostgresqlPostgresql Version7.4
PostgresqlPostgresql Version7.4.1
PostgresqlPostgresql Version7.4.2
PostgresqlPostgresql Version7.4.3
PostgresqlPostgresql Version7.4.4
PostgresqlPostgresql Version7.4.5
PostgresqlPostgresql Version7.4.6
PostgresqlPostgresql Version7.4.7
PostgresqlPostgresql Version7.4.8
PostgresqlPostgresql Version7.4.9
PostgresqlPostgresql Version7.4.10
PostgresqlPostgresql Version7.4.11
PostgresqlPostgresql Version7.4.12
PostgresqlPostgresql Version8.0
PostgresqlPostgresql Version8.0.1
PostgresqlPostgresql Version8.0.2
PostgresqlPostgresql Version8.0.3
PostgresqlPostgresql Version8.0.4
PostgresqlPostgresql Version8.0.5
PostgresqlPostgresql Version8.0.6
PostgresqlPostgresql Version8.0.7
PostgresqlPostgresql Version8.1
PostgresqlPostgresql Version8.1.1
PostgresqlPostgresql Version8.1.2
PostgresqlPostgresql Version8.1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.79% 0.846
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
http://secunia.com/advisories/20782
http://secunia.com/advisories/20232
http://secunia.com/advisories/20653
http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm
http://www.redhat.com/support/errata/RHSA-2006-0526.html
http://www.trustix.org/errata/2006/0032/
http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php
Patch
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html
http://secunia.com/advisories/20231
http://secunia.com/advisories/20314
http://secunia.com/advisories/20435
http://secunia.com/advisories/20451
http://secunia.com/advisories/20503
http://secunia.com/advisories/20555
http://secunia.com/advisories/21001
http://security.gentoo.org/glsa/glsa-200607-04.xml
http://securitytracker.com/id?1016142
http://www.debian.org/security/2006/dsa-1087
http://www.mandriva.com/security/advisories?name=MDKSA-2006:098
http://www.postgresql.org/docs/techdocs.50
http://www.securityfocus.com/archive/1/435038/100/0/threaded
http://www.securityfocus.com/archive/1/435161/100/0/threaded
http://www.securityfocus.com/bid/18092
http://www.ubuntu.com/usn/usn-288-2
http://www.vupen.com/english/advisories/2006/1941
https://exchange.xforce.ibmcloud.com/vulnerabilities/26627
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10618
https://usn.ubuntu.com/288-1/