FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  321198
Date:      2013-06-18
Time:      15:50:05Z
Committer: delphij

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
5d425189-7a03-11d9-a9e7-0001020eed82	postgresql -- privilege escalation vulnerability John Heasman and others disovered that non-privileged users could use the LOAD extension to load arbitrary libraries into the postgres server process space. This could be used by non-privileged local users to execute arbitrary code with the privileges of the postgresql server. Discovery 2005-01-21 Entry 2005-02-08 postgresql postgresql-server ja-postgresql lt 7.3.9 gt 7.4.* lt 7.4.7 gt 8.* lt 8.0.1 postgresql-devel le 8.0.1,1 12411 CVE-2005-0227 http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php
6b4b0b3f-8127-11d9-a9e7-0001020eed82	postgresql -- multiple buffer overflows in PL/PgSQL parser The PL/PgSQL parser in postgresql is vulnerable to several buffer overflows. These could be exploited by a remote attacker to execute arbitrary code with the permissions of the postgresql server by running a specially crafted query. Discovery 2005-02-07 Entry 2005-02-17 Modified 2005-02-19 postgresql postgresql-server ja-postgresql lt 7.3.9_1 gt 7.4.* lt 7.4.7_1 gt 8.* lt 8.0.1_1 CVE-2005-0247 http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php
5d425189-7a03-11d9-a9e7-0001020eed82	postgresql -- privilege escalation vulnerability John Heasman and others disovered that non-privileged users could use the LOAD extension to load arbitrary libraries into the postgres server process space. This could be used by non-privileged local users to execute arbitrary code with the privileges of the postgresql server. Discovery 2005-01-21 Entry 2005-02-08 postgresql postgresql-server ja-postgresql lt 7.3.9 gt 7.4.* lt 7.4.7 gt 8.* lt 8.0.1 postgresql-devel le 8.0.1,1 12411 CVE-2005-0227 http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php
6b4b0b3f-8127-11d9-a9e7-0001020eed82	postgresql -- multiple buffer overflows in PL/PgSQL parser The PL/PgSQL parser in postgresql is vulnerable to several buffer overflows. These could be exploited by a remote attacker to execute arbitrary code with the permissions of the postgresql server by running a specially crafted query. Discovery 2005-02-07 Entry 2005-02-17 Modified 2005-02-19 postgresql postgresql-server ja-postgresql lt 7.3.9_1 gt 7.4.* lt 7.4.7_1 gt 8.* lt 8.0.1_1 CVE-2005-0247 http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php