NVD Vulnerability Detail

CVE-2006-5540

Summary	backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
Summary	El fichero backend/parser/analyze.c en PostgreSQL 8.1.x versiones anteriores a 8.1.5 permite a usuarios remotos sin autenticar provocar una denegación de servicio (daemon crash) mediante funciones agregadas concretas en una sentencia UPDATE, que no han sido debidamente tratadas durante una "optimización de índices MIN/MAX."
Publication Date	Oct. 27, 2006, 2:07 a.m.
Registration Date	Jan. 29, 2021, 3:48 p.m.
Last Update	April 23, 2026, 9:35 a.m.

CVSS2.0 : MEDIUM
Score	4.0
Vector	AV:N/AC:L/Au:S/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	単一
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:postgresql:postgresql:6.3.2:::::::*
cpe:2.3:a:postgresql:postgresql:6.5.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.0.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.0.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.1.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.1.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.1.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.7:::::::*
cpe:2.3:a:postgresql:postgresql:7.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.6:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.8:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.9:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.10:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.11:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.12:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.13:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.14:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.15:::::::*
cpe:2.3:a:postgresql:postgresql:7.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.5:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.6:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.7:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.8:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.9:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.10:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.11:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.12:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.13:::::::*
cpe:2.3:a:postgresql:postgresql:8.0:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.2:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.3:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.4:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.5:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.6:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.7:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.8:::::::*
cpe:2.3:a:postgresql:postgresql:8.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.2:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.3:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.4:::::::*

Related information, measures and tools

No	URL	refsource
1	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	cve@mitre.org
2	http://projects.commandprompt.com/public/pgsql/changeset/25504	cve@mitre.org
3	http://secunia.com/advisories/22562	cve@mitre.org
4	http://secunia.com/advisories/22584	cve@mitre.org
5	http://secunia.com/advisories/22606	cve@mitre.org
6	http://secunia.com/advisories/22636	cve@mitre.org
7	http://secunia.com/advisories/23048	cve@mitre.org
8	http://secunia.com/advisories/23132	cve@mitre.org
9	http://secunia.com/advisories/24094	cve@mitre.org
10	http://secunia.com/advisories/24284	cve@mitre.org
11	http://secunia.com/advisories/24577	cve@mitre.org
12	http://securitytracker.com/id?1017115	cve@mitre.org
13	http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm	cve@mitre.org
14	http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html	cve@mitre.org
15	http://www.mandriva.com/security/advisories?name=MDKSA-2006:194	cve@mitre.org
16	http://www.novell.com/linux/security/advisories/2006_27_sr.html	cve@mitre.org
17	http://www.postgresql.org/about/news.664	cve@mitre.org
18	http://www.redhat.com/support/errata/RHSA-2007-0064.html	cve@mitre.org
19	http://www.redhat.com/support/errata/RHSA-2007-0067.html	cve@mitre.org
20	http://www.redhat.com/support/errata/RHSA-2007-0068.html	cve@mitre.org
21	http://www.securityfocus.com/bid/20717	cve@mitre.org
22	http://www.trustix.org/errata/2006/0059/	cve@mitre.org
23	http://www.ubuntu.com/usn/usn-369-1	cve@mitre.org
24	http://www.ubuntu.com/usn/usn-369-2	cve@mitre.org
25	http://www.vupen.com/english/advisories/2006/4182	cve@mitre.org
26	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425	cve@mitre.org
27	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	af854a3a-2127-422b-91ae-364da2661108
28	http://projects.commandprompt.com/public/pgsql/changeset/25504	af854a3a-2127-422b-91ae-364da2661108
29	http://secunia.com/advisories/22562	af854a3a-2127-422b-91ae-364da2661108
30	http://secunia.com/advisories/22584	af854a3a-2127-422b-91ae-364da2661108
31	http://secunia.com/advisories/22606	af854a3a-2127-422b-91ae-364da2661108
32	http://secunia.com/advisories/22636	af854a3a-2127-422b-91ae-364da2661108
33	http://secunia.com/advisories/23048	af854a3a-2127-422b-91ae-364da2661108
34	http://secunia.com/advisories/23132	af854a3a-2127-422b-91ae-364da2661108
35	http://secunia.com/advisories/24094	af854a3a-2127-422b-91ae-364da2661108
36	http://secunia.com/advisories/24284	af854a3a-2127-422b-91ae-364da2661108
37	http://secunia.com/advisories/24577	af854a3a-2127-422b-91ae-364da2661108
38	http://securitytracker.com/id?1017115	af854a3a-2127-422b-91ae-364da2661108
39	http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm	af854a3a-2127-422b-91ae-364da2661108
40	http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html	af854a3a-2127-422b-91ae-364da2661108
41	http://www.mandriva.com/security/advisories?name=MDKSA-2006:194	af854a3a-2127-422b-91ae-364da2661108
42	http://www.novell.com/linux/security/advisories/2006_27_sr.html	af854a3a-2127-422b-91ae-364da2661108
43	http://www.postgresql.org/about/news.664	af854a3a-2127-422b-91ae-364da2661108
44	http://www.redhat.com/support/errata/RHSA-2007-0064.html	af854a3a-2127-422b-91ae-364da2661108
45	http://www.redhat.com/support/errata/RHSA-2007-0067.html	af854a3a-2127-422b-91ae-364da2661108
46	http://www.redhat.com/support/errata/RHSA-2007-0068.html	af854a3a-2127-422b-91ae-364da2661108
47	http://www.securityfocus.com/bid/20717	af854a3a-2127-422b-91ae-364da2661108
48	http://www.trustix.org/errata/2006/0059/	af854a3a-2127-422b-91ae-364da2661108
49	http://www.ubuntu.com/usn/usn-369-1	af854a3a-2127-422b-91ae-364da2661108
50	http://www.ubuntu.com/usn/usn-369-2	af854a3a-2127-422b-91ae-364da2661108
51	http://www.vupen.com/english/advisories/2006/4182	af854a3a-2127-422b-91ae-364da2661108
52	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425	af854a3a-2127-422b-91ae-364da2661108

Common Vulnerabilities List

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:postgresql:postgresql:6.3.2:::::::*
cpe:2.3:a:postgresql:postgresql:6.5.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.0.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.0.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.1.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.1.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.1.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.2.7:::::::*
cpe:2.3:a:postgresql:postgresql:7.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.6:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.8:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.9:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.10:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.11:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.12:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.13:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.14:::::::*
cpe:2.3:a:postgresql:postgresql:7.3.15:::::::*
cpe:2.3:a:postgresql:postgresql:7.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.1:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.2:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.3:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.4:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.5:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.6:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.7:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.8:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.9:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.10:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.11:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.12:::::::*
cpe:2.3:a:postgresql:postgresql:7.4.13:::::::*
cpe:2.3:a:postgresql:postgresql:8.0:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.2:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.3:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.4:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.5:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.6:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.7:::::::*
cpe:2.3:a:postgresql:postgresql:8.0.8:::::::*
cpe:2.3:a:postgresql:postgresql:8.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.2:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.3:::::::*
cpe:2.3:a:postgresql:postgresql:8.1.4:::::::*