Description

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.

Remediation

References

CVE-2009-3229

Related Vulnerabilities

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.16)

Moodle Other Vulnerability (CVE-2004-2237)

WordPress Plugin Slideshow Pro 'upload.php' Arbitrary File Upload (2.1)

Serendipity Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2006-6242)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4049)

Severity

Medium

Classification

CVE-2009-3229

Tags

Missing Update Known Vulnerabilities