Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3 http://www.vuxml.org/freebsd/0b2b4b4d-a07c-11da-be0a-000c6ec775d9.html
Insight
The following package is affected: postgresql-server
CVE-2006-0553
PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via 'knowledge of the backend protocol' using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.
Severity
Classification
-
CVE CVE-2006-0553 -
CVSS Base Score: 6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P
Related Vulnerabilities