Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

postgresql: improper validation with Asserts enabled

Package(s):

postgresql

CVE #(s):

CVE-2006-0678

Created:

February 27, 2006

Updated:

February 28, 2006

Description:

PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553.

Alerts:

Ubuntu

USN-258-1

2006-02-27

(Log in to post comments)