CVE-2006-0105: Medium severity PostgreSQL postgresql vulnerability

Published Jan 10, 2006

Updated

PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests.

Affected Software

8 affected components

PostgreSQL postgresql=8.0

PostgreSQL postgresql=8.0.1

PostgreSQL postgresql=8.0.2

PostgreSQL postgresql=8.0.3

PostgreSQL postgresql=8.0.4

PostgreSQL postgresql=8.0.5

PostgreSQL postgresql=8.1.0

PostgreSQL postgresql=8.1.1

Remediation

Patch Available

http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php

Event History

Jan 10, 2006

CVE Published

08:03 PM

Jan 11, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0105?

CVE-2006-0105 has a severity classification that indicates a denial of service vulnerability affecting PostgreSQL on Windows.

How do I fix CVE-2006-0105?

To fix CVE-2006-0105, upgrade PostgreSQL to version 8.0.6 or 8.1.2 or later.

Which versions of PostgreSQL are affected by CVE-2006-0105?

CVE-2006-0105 affects PostgreSQL versions 8.0.2 to 8.0.5 and 8.1.0 to 8.1.1 when running on Windows.

What type of attack exploits CVE-2006-0105?

CVE-2006-0105 can be exploited through a denial of service attack that overwhelms the PostgreSQL server with simultaneous connection requests.

Is there a workaround for CVE-2006-0105?

There are no specific workarounds for CVE-2006-0105 other than applying the appropriate software updates.