Test ID:	1.3.6.1.4.1.25623.1.0.53754
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 397-1 (postgresql)
Summary:	The remote host is missing an update to postgresql;announced via advisory DSA 397-1.
Description:	Summary: The remote host is missing an update to postgresql announced via advisory DSA 397-1. Vulnerability Insight: Tom Lane discovered a buffer overflow in the to_ascii function in PostgreSQL. This allows remote attackers to execute arbitrary code on the host running the database. For the stable distribution (woody) this problem has been fixed in version 7.2.1-2woody4. The unstable distribution (sid) does not contain this problem. Solution: We recommend that you upgrade your postgresql package. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0901 BugTraq ID: 8741 http://www.securityfocus.com/bid/8741 Conectiva Linux advisory: CLA-2003:784 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000784 Conectiva Linux advisory: CLSA-2003:772 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000772 Debian Security Information: DSA-397 (Google Search) http://www.debian.org/security/2003/dsa-397 http://www.redhat.com/support/errata/RHSA-2003-313.html http://www.redhat.com/support/errata/RHSA-2003-314.html
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.