The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by re-LOAD-ing libraries from a certain plugins directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Postgresql | Postgresql | 8.2 (including) | 8.2 (including) |
| Postgresql | Postgresql | 8.2.1 (including) | 8.2.1 (including) |
| Postgresql | Postgresql | 8.2.2 (including) | 8.2.2 (including) |
| Postgresql | Postgresql | 8.2.3 (including) | 8.2.3 (including) |
| Postgresql | Postgresql | 8.2.4 (including) | 8.2.4 (including) |
| Postgresql | Postgresql | 8.2.5 (including) | 8.2.5 (including) |
| Postgresql | Postgresql | 8.2.6 (including) | 8.2.6 (including) |
| Postgresql | Postgresql | 8.2.7 (including) | 8.2.7 (including) |
| Postgresql | Postgresql | 8.2.8 (including) | 8.2.8 (including) |
| Postgresql | Postgresql | 8.2.9 (including) | 8.2.9 (including) |
| Postgresql | Postgresql | 8.2.10 (including) | 8.2.10 (including) |
| Postgresql | Postgresql | 8.2.11 (including) | 8.2.11 (including) |
| Postgresql | Postgresql | 8.2.12 (including) | 8.2.12 (including) |
| Postgresql | Postgresql | 8.2.13 (including) | 8.2.13 (including) |
| Postgresql | Postgresql | 8.3 (including) | 8.3 (including) |
| Postgresql | Postgresql | 8.3.1 (including) | 8.3.1 (including) |
| Postgresql | Postgresql | 8.3.2 (including) | 8.3.2 (including) |
| Postgresql | Postgresql | 8.3.3 (including) | 8.3.3 (including) |
| Postgresql | Postgresql | 8.3.4 (including) | 8.3.4 (including) |
| Postgresql | Postgresql | 8.3.5 (including) | 8.3.5 (including) |
| Postgresql | Postgresql | 8.3.6 (including) | 8.3.6 (including) |
| Postgresql | Postgresql | 8.3.7 (including) | 8.3.7 (including) |
| Postgresql | Postgresql | 8.4 (including) | 8.4 (including) |
| Postgresql-8.3 | Ubuntu | hardy | * |
| Postgresql-8.3 | Ubuntu | intrepid | * |
| Postgresql-8.3 | Ubuntu | jaunty | * |
| Postgresql-8.3 | Ubuntu | upstream | * |
References
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
- http://marc.info/?l=bugtraq\u0026m=134124585221119\u0026w=2
- http://secunia.com/advisories/36660
- http://secunia.com/advisories/36727
- http://secunia.com/advisories/36800
- http://secunia.com/advisories/36837
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
- http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
- http://www.postgresql.org/docs/8.3/static/release-8-3-8.html
- http://www.postgresql.org/support/security.html
- http://www.securityfocus.com/archive/1/509917/100/0/threaded
- http://www.securityfocus.com/bid/36314
- http://www.ubuntu.com/usn/usn-834-1
- http://www.us.debian.org/security/2009/dsa-1900
- https://bugzilla.redhat.com/show_bug.cgi?id=522092
- https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
- https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
- http://marc.info/?l=bugtraq\u0026m=134124585221119\u0026w=2
- http://secunia.com/advisories/36660
- http://secunia.com/advisories/36727
- http://secunia.com/advisories/36800
- http://secunia.com/advisories/36837
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
- http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
- http://www.postgresql.org/docs/8.3/static/release-8-3-8.html
- http://www.postgresql.org/support/security.html
- http://www.securityfocus.com/archive/1/509917/100/0/threaded
- http://www.securityfocus.com/bid/36314
- http://www.ubuntu.com/usn/usn-834-1
- http://www.us.debian.org/security/2009/dsa-1900
- https://bugzilla.redhat.com/show_bug.cgi?id=522092
- https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
- https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html