This host is installed with PostgreSQL PgBouncer pooler and is prone to denial of service vulnerability.

Successful exploitation will allow remote attackers to cause the application to crash by creating a denial of service condition. Impact Level: Application

Upgrade to PostgreSQL PgBouncer Pooler version 1.5.3 or later, For updates refer to http://wiki.postgresql.org/wiki/PgBouncer

An error exists within the 'add_database' function in objects.c in the pgbouncer pooler when adding new databases with an an overly large name.

PostgreSQL PgBouncer Pooler version 1.5.2 and prior on Windows

• http://git.postgresql.org/gitweb/?p=pgbouncer.git;a=commit;h=4b92112b820830b30cd7bc91bef3dd8f35305525
• http://openwall.com/lists/oss-security/2012/11/02/8
• http://secunia.com/advisories/51128
• http://www.osvdb.org/87560
• http://xforce.iss.net/xforce/xfdb/79751

---

Updated on 2015-03-25