CVE-2006-2313

Severity

75%

Complexity

99%

Confidentiality

106%

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

Type

PostgreSQL

First reported 18 years ago

2006-05-24 10:06:00

Last updated 6 years ago

2018-10-18 16:39:00

Affected Software

PostgreSQL 7.3

7.3

PostgreSQL 7.3.1

7.3.1

PostgreSQL 7.3.2

7.3.2

PostgreSQL 7.3.3

7.3.3

PostgreSQL 7.3.4

7.3.4

PostgreSQL 7.3.5

7.3.5

PostgreSQL 7.3.6

7.3.6

PostgreSQL 7.3.7

7.3.7

PostgreSQL 7.3.8

7.3.8

PostgreSQL 7.3.9

7.3.9

PostgreSQL 7.3.10

7.3.10

PostgreSQL 7.3.11

7.3.11

PostgreSQL 7.3.12

7.3.12

PostgreSQL 7.3.13

7.3.13

PostgreSQL 7.3.14

7.3.14

PostgreSQL PostgreSQL 7.4

7.4

PostgreSQL PostgreSQL 7.4.1

7.4.1

PostgreSQL PostgreSQL 7.4.2

7.4.2

PostgreSQL PostgreSQL 7.4.3

7.4.3

PostgreSQL PostgreSQL 7.4.4

7.4.4

PostgreSQL PostgreSQL 7.4.5

7.4.5

PostgreSQL PostgreSQL 7.4.6

7.4.6

PostgreSQL PostgreSQL 7.4.7

7.4.7

PostgreSQL PostgreSQL 7.4.8

7.4.8

PostgreSQL PostgreSQL 7.4.9

7.4.9

PostgreSQL PostgreSQL 7.4.10

7.4.10

PostgreSQL PostgreSQL 7.4.11

7.4.11

PostgreSQL PostgreSQL 7.4.12

7.4.12

PostgreSQL 8.0

8.0

PostgreSQL PostgreSQL 8.0.1

8.0.1

PostgreSQL PostgreSQL 8.0.2

8.0.2

PostgreSQL PostgreSQL 8.0.3

8.0.3

PostgreSQL PostgreSQL 8.0.4

8.0.4

PostgreSQL PostgreSQL 8.0.5

8.0.5

PostgreSQL PostgreSQL 8.0.6

8.0.6

PostgreSQL PostgreSQL 8.0.7

8.0.7

PostgreSQL 8.1

8.1

PostgreSQL 8.1.1

8.1.1

PostgreSQL 8.1.2

8.1.2

PostgreSQL 8.1.3

8.1.3

References

20060602-01-U

[pgsql-announce] 20060523 Security Releases for All Active Versions

Patch

SUSE-SA:2006:030

20231

20232

20314

20435

20451

20503

20555

20653

20782

21001

GLSA-200607-04

1016142

http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm

DSA-1087

MDKSA-2006:098

http://www.postgresql.org/docs/techdocs.50

RHSA-2006:0526

20060523 PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15

20060524 rPSA-2006-0080-1 postgresql postgresql-server

18092

2006-0032

USN-288-2

ADV-2006-1941

postgresql-multibyte-sql-injection(26627)

oval:org.mitre.oval:def:10618

USN-288-1

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.