| Description: | Description:
The remote host is missing an update to postgresql
announced via advisory FEDORA-2008-0552.
References:
Resolves: #237682 - CVE-2007-2138 PostgreSQL security-definer function privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=237682
[ 1 ] Bug #427128 - CVE-2007-6601 PostgreSQL privilege escalation via dblink
https://bugzilla.redhat.com/show_bug.cgi?id=427128
[ 2 ] Bug #315231 - CVE-2007-4769 postgresql integer overflow in regex code
https://bugzilla.redhat.com/show_bug.cgi?id=315231
[ 3 ] Bug #427772 - CVE-2007-4769 CVE-2007-4772 CVE-2007-6067 CVE-2007-6600 CVE-2007-6601 Multiple postgresql vulnerabilities [Fedora 7]
https://bugzilla.redhat.com/show_bug.cgi?id=427772
[ 4 ] Bug #316511 - CVE-2007-4772 postgresql DoS via infinite loop in regex NFA optimization code
https://bugzilla.redhat.com/show_bug.cgi?id=316511
[ 5 ] Bug #400931 - CVE-2007-6067 postgresql: tempory DoS caused by slow regex NFA cleanup
https://bugzilla.redhat.com/show_bug.cgi?id=400931
[ 6 ] Bug #427127 - CVE-2007-6600 PostgreSQL privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=427127
Solution: Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update postgresql'
at the command line. For more information, refer to Managing Software
with yum, available at http://docs.fedoraproject.org/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-0552
Risk factor : High
CVSS Score:
7.2
|
