PT-2012-5484 · Pgbouncer · Pgbouncer
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
pgbouncer version 1.5.2
Description
The issue allows remote attackers to cause a denial of service, resulting in a daemon outage. This is achieved by sending a request with a long database name to the
add database function in objects.c.Recommendations
For version 1.5.2, consider restricting access to the
add database function until a patch is available to prevent exploitation.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pgbouncer