Summary
The remote host is missing an update to postgresql announced via advisory DSA 516-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20516-1
Insight
A buffer overflow has been discovered in the ODBC driver of PostgreSQL, an object-relational SQL database, descended from POSTGRES. It possible to exploit this problem and crash the surrounding application. Hence, a PHP script using php4-odbc can be utilised to crash the surrounding Apache webserver. Other parts of postgresql are not affected.
For the stable distribution (woody) this problem has been fixed in version 7.2.1-2woody5.
For the unstable distribution (sid) this problem has been fixed in version 07.03.0200-3.
We recommend that you upgrade your postgresql and related package.
Severity
Classification
-
CVE CVE-2004-0547 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities